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RECYCLABLE 



Wichtige Sicherheitshinweise 

1. Bittelesen Siesich diese Hinweise sorgfaltig durch. 

2. Heben Sie diese Anleitung fur den spatern Gebrauch auf. 

3. Vor jedem Reinigen ist das Gerat vom Stromnetz zu trennen. Vervenden Sie keine Flussig- Oder Aerosolreiniger. Am besten dient ein angefeuchtetes 
Tuch zur Reinigung. 

4. Um eine Beschadigung des Gerates zu vermeiden sollten Sie nur Zubehbrteile verwenden, die vom Hersteller zugelassen sind. 

5. Das Gerat is vor Feuchtigkeit zu schutzen. 

6. Bei der Aufstellung des Gerates ist auf sichern Stand zu achten. Ein Kippen Oder Fallen kbnnte Verletzungen hervorrufen. Verwenden Sie nur sichere 
Standorte und beachten SiedieAufstellhinweisedes Herstellers. 

7. Die Beluftungsbffnungen dienen zur Luftzirkulation die das Gerat vor Uberhitzung schutzt. Sorgen Sie dafur, daB diese Offnungen nicht abgedeckt 
werden. 

8. Beachten Sie beim AnschluB an das Stromnetz die AnschluEwerte. 

9. Die NetzanschluEsteckdose muB aus Grunden der elektrischen Sicherheit einen Schutzleiterkontakt haben. 

10. Verlegen Sie die NetzanschluBleitung so, daB niemand daruber fallen kann. Es sollete auch nichts auf der Leitung abgestellt werden. 

11. Alle Hinweise und Warnungen die sich am Geraten befinden sind zu beachten. 

12. Wird das Gerat uber einen langeren Zeitraum nicht benutzt, sollten Sie es vom Stromnetz trennen. Somit wird im Falle einer Uberspannung eine 
Beschadigung vermieden. 

13. Durch die Luftungsbffnungen durfen niemals Gegenstande Oder Fliissigkeiten in das Gerat gelangen. Dies kbnnte einen Brand bzw. Elektrischen Schlag 
auslosen. 

14. Offnen Sie niemals das Gerat. Das Gerat darf aus Grunden der elektrischen Sicherheit nur von authorisiertem Servicepersonal gebffnet werden. 

15. Wenn folgende Situationen auftreten ist das Gerat vom Stromnetz zu trennen und von einer qualifizierten Servicestelle zu iiberpriifen: 
a - Netzkabel Oder Netzstecker sint beschadigt. 

b - Fliissigkeit ist in das Gerat eingedrungen. 
c - Das Gerat war Feuchtigkeit ausgesetzt. 

d - Wenn das Gerat nicht der Bedienungsanleitung ensprechend funktioniert Oder Sie mit Hilfe dieser Anleitung keine Verbesserung erzielen. 
e - Das Gerat ist gefallen und/oder das Gehause ist beschadigt. 
f - Wenn das Gerat deutliche Anzeichen eines Defektes aufweist. 

16. Bei Reparaturen durfen nur Orginalersatzteile bzw. den Orginalteilen entsprechendeTeile verwendet werden. Der Einsatz von ungeeigneten 
Ersatzteilen kann eineweitere Beschadigung hervorrufen. 

17. Wenden Sie sich mit alien Fragen die Service und Repartur betreffen an I hren Servicepartner. Somit stellen Sie die Betriebssicherheit des Gerates 
si cher. 

1. Zum NetzanschluB dieses Gerates ist eine geprufte Leitung zu verwenden, Fur einen Nennstrom bis 6A und einem Gerategewicht gr Ber 3kg ist eine 
Leitung nicht leichter als H05VV-F, 3G, 0.75mm2 einzusetzen. 



WARRANTIES EXCLUSIVE 



IF THE D-LINK PRODUCT DOES NOT OPERATE AS WARRANTED ABOVE, THE CUSTOMER'S SOLE REMEDY SHALL BE, AT D-LINK'S OPTION, 
REPAIR OR REPLACEMENT. THE FOREGOING WARRANTIES AND REMEDIES ARE EXCLUSIVE AND ARE IN LIEU OF ALL OTHER WARRANTIES, 
EXPRESSED OR IMPLIED, EITHER IN FACT OR BY OPERATION OF LAW, STATUTORY OR OTHERWISE, INCLUDING WARRANTIES OF 
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. D-LINK NEITHER ASSUMES NOR AUTHORIZES ANY OTHER PERSON TO 
ASSUME FOR IT ANY OTHER LIABILITY IN CONNECTION WITH THE SALE, INSTALLATION MAINTENANCE OR USE OF D-LINK'S PRODUCTS 
D-LINK SHALL NOT BE LIABLE UNDER THIS WARRANTY IF ITS TESTING AND EXAMINATION DISCLOSE THAT THE ALLEGED DEFECT IN THE 
PRODUCT DOES NOT EXIST OR WAS CAUSED BY THE CUSTOMER'S OR ANY THIRD PERSON'S MISUSE, NEGLECT, IMPROPER INSTALLATION OR 
TESTING, UNAUTHORIZED ATTEMPTS TO REPAIR, OR ANY OTHER CAUSE BEYOND THE RANGE OF THE INTENDED USE, OR BY ACCIDENT, 
FIRE, LIGHTNING OR OTHER HAZARD. 

LIMITATION OF LIABILITY 

IN NO EVENT WILL D-LINK BE LIABLE FOR ANY DAMAGES, INCLUDING LOSS OF DATA, LOSS OF PROFITS, COST OF COVER OR OTHER 
INCIDENTAL, CONSEQUENTIAL OR INDIRECT DAMAGES ARISING OUT THE INSTALLATION, MAINTENANCE, USE, PERFORMANCE, FAILURE OR 
INTERRUPTION OF A D- LINK PRODUCT, HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY. THIS LIMITATION WILL APPLY EVEN IF D- 
LINK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. 

IF YOU PURCHASED A D-LINK PRODUCT IN THE UNITED STATES, SOME STATES DO NOT ALLOW THE LIMITATION OR EXCLUSION OF 
LIABILITY FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THE ABOVE LIMITATION MAY NOT APPLY TO YOU. 

Limited Warranty 
Hardware: 

D-Link warrants each of its hardware products to be free from defects in workmanship and materials under normal use and service for a period commencing 
on the date of purchase from D-Link or its Authorized Reseller and extending for the length of time stipulated by the Authorized Reseller or D-Link Branch 
Office nearest to the place of purchase. 

This Warranty applies on the condition that the product Registration Card is filled out and returned to a D-Link office within ninety (90) days of purchase. A 
list of D-Link offices is provided at the back of this manual, together with a copy of the Registration Card. 

If the product proves defective within the applicable warranty period, D-Link will provide repair or replacement of the product. D-Link shall have the sole 
discretion whether to repair or replace, and replacement product may be new or reconditioned. Replacement product shall be of equivalent or better 
specifications, relative to the defective product, but need not be identical. Any product or part repaired by D-Link pursuant to this warranty shall have a 
warranty period of not less than 90 days, from date of such repair, irrespective of any earlier expiration of original warranty period. When D-Link provides 
replacement, then the defective product becomes the property of D-Link. 

Warranty service may be obtained by contactin 

g a D-Link office within the applicable warranty period, and requesting a Return Material Authorization (RMA) number. If a Registration Card for the 
product in question has not been returned to D-Link, then a proof of purchase (such as a copy of the dated purchase invoice) must be provided. If Purchaser's 
circumstances require special handling of warranty correction, then at the time of requesting RMA number. Purchaser may also propose special procedure as 
may be suitable to the case. 

After an RMA number is issued, the defective product must be packaged securely in the original or other suitable shipping package to ensure that it will not 
be damaged in transit, and the RMA number must be prominently marked on the outside of the package. The package must be mailed or otherwise shipped 
to D-Link with all costs of mailing/shipping/insurance prepaid. D-Link shall never be responsible for any software, firmware, information, or memory data of 
Purchaser contained in, stored on, or integrated with any product returned to D-Link pursuant to this warranty. 

Any package returned to D-Link without an RMA number will be rejected and shipped back to Purchaser at Purchaser's expense, and D-Link reserves the right 
in such a case to levy a reasonable handling charge in addition mailing or shipping costs. 

Software: 

Warranty service for software products may be obtained by contacting a D-Link office within the applicable warranty period. A list of D-Link offices is 
provided at the back of this manual, together with a copy of the Registration Card. If a Registration Card for the product in question has not been returned 
to a D-Link office, then a proof of purchase (such as a copy of the dated purchase invoice) must be provided when requesting warranty service. The term 
"purchase" in this software warranty refers to the purchase transaction and resulting license to use such software. 

D-Link warrants that its software products will perform in substantial conformance with the applicable product documentation provided by D-Link with such 
software product, for a period of ninety (90) days from the date of purchase from D-Link or its Authorized Reseller. D-Link warrants the magnetic media, on 
which D-Link provides its software product, against failure during the same warranty period. This warranty applies to purchased software, and to 
replacement software provided by D-Link pursuant to this warranty, but shall not apply to any update or replacement which may be provided for download 
via the I nternet, or to any update which may otherwise be provided free of charge. 

D-Link's sole obligation under this software warranty shall be to replace any defective software product with product which substantially conforms to D-Link's 
applicable product documentation. Purchaser assumes responsibility for the selection of appropriate application and system/platform software and associated 



reference materials. D-Link makes no warranty that its software products will work in combination with any hardware, or any application or 
system/platform software product provided by any third party, excepting only such products as are expressly represented, in D-Link's applicable product 
documentation as being compatible. D-Link's obligation under this warranty shall be a reasonable effort to provide compatibility, but D-Link shall have no 
obligation to provide compatibility when there is fault in the third-party hardware or software. D-Link makes no warranty that operation of its software 
products will be uninterrupted or absolutely error-free, and no warranty that all defects in the software product, within or without the scope of D-Link's 
applicable product documentation, will be corrected. 



D-Link Offices for Registration and Warranty Service 

The product's Registration Card, provided at the back of this manual, must be sent to a D-Link office. To obtain an RMA 
number for warranty service as to a hardware product, or to obtain warranty service as to a software product, contact the 
D-Link office nearest you. An address/telephone/fax/e-mai I/Web site list of D-Link offices is provided in the back of this 
manual. 

Trademarks 

Copyright ©2000 D-Link Corporation. Contents subject to change without prior notice. D-Link is a registered trademark of 
D-Link Corporation/D-Link Systems, Inc. All other trademarks belong to their respective proprietors. 

Copyright Statement 

No part of this publication may be reproduced in any form or by any means or used to make any derivative such as 
translation, transformation, or adaptation without permission from D-Link Corporation/D-Link Systems Inc., as 
stipulated by the United States Copyright Act of 1976. 

FCC Warning 

This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the 
FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment 
is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if 
not installed and used in accordance with this user's guide, may cause harmful interference to radio communications. 
Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be 
required to correct the interference at his own expense. 

This device complies with part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device 
may not cause harmful interference, and (2) this device must accept any interference received, including interference that 
may cause undesi red operation. 

CE Mark Warning 

This is a Class A product. I n a domestic environment, this product may cause radio interference in which case the user may 
berequired to take adequate measures. 

Warnung! 

Dies ist in Produkt der Klasse A. I m Wohnbereich kann dieses Produkt Funkstoerungen verursachen. I n diesem Fall kann 
vom Benutzer verlangt werden, angemessene Massnahmen zu ergreifen. 

Precaucion! 

Esteesun productodeClaseA. En un entornodomestico, puedecausar interferencias deradio, en cuyocase, puede 
requerirse al usuario para queadopte las medidas adecuadas. 

Attention! 

Ceci est un produit declasseA. Dans un environnement domestique, ceproduit pourrait causer des i nterferences radio, 
auquel cas Tutilisateur devrait prendre les mesures adequates. 

Attenzione! 

1 1 presente prodotto appartiene alia dasse A. Se utilizzato in ambiente domestico il prodotto puo causare interferenze 
radio, nel cui rasoepcssibilecherutentedebbaassumereprcwedimenti adeguati. 

VCCI Warning 
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BSMI Warning 
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24-port NWay Ethernet Switch User's Guide 



About This Guide 

This User's Guide tells you how to install your DES-3225G Series Switch, how to connect it to your Ethernet network, and 
how to set its configuration using either the built-in console interface or Web-based management. 



Terms 

For simplicity, this documentation uses the terms "Switch" (first letter upper case) to refer to the DES-3225G Series 24- 
port NWay Ethernet Switch, and "switch" (first letter lower case) to refer to all Ethernet switches, including the DES- 
3225G. 



Overview of this User's Guide 

♦ Chapter 1, "I ntroducti on. "Describes the Switch and itsfeatures. 

♦ Chapter 2, "U n packi ng a nd Setu p." H el ps you get started with the basic i nstal I ati on of the Switch. 

♦ Chapter 3, "Identifying External" Components. Describes the front panel, rear panel, optional plug-in modules, 
and LED indicators of theSwitch. 

♦ Chapter 4, "Connecting theSwitch.'Tellshowyou can connect the DES-3225G to your Ethernet network. 

♦ Chapter 5, "Switch Management Concepts." Talks about Local Console Management via the RS-232 DCE console 
port and other aspects about how to manage the Switch. 

♦ Chapter 6, 'Using the Console Interface" Tells how to use the built-in console interface to change, set, and 
monitor Switch performance and security. 

♦ Chapter 7, "Web-Based Network Management/Tells how to managethe Switch through an I nternet browser. 

♦ Appendix A, 'Technical Specifications."Liststhetechnical sped fi cations of theDES-3225G. 

♦ AppendixB, "RJ -45 Pin Specifications. Shows thedetai Is and pin assignments for the RJ -45 receptacle/connector. 

♦ AppendixC, "SampleConfiguration File." 

♦ Appendix D, "Runtime Switch Software Default Settings." 
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Introduction 



Thissection describes thefeatures of theSwitch, as well as giving some background information about Ethernet/Fast 
Ethernet, Gigabit Ethernet, and switching technology. 



Fast Ethernet Technology 



The growi ng i mportance of LAN s and the i ncreasi ng complexity of desktop computi ng appl i cati ons are fuel i ng the need for 
high performance networks. A number of high-speed LAN technologies are proposed to provide greater bandwidth and 
improve client/server response times. Among them, Fast Ethernet, or 100BASE-TX, providesa non-disruptive, smooth 
evolution from the current 10BASE-T technology. The dominating market position virtually guarantee cost effective and 
high performance Fast Ethernet solutions in the years to come. 

100M bps Fast Ethernet is a standard specified by the IEEE 802.3 LAN committee 1 1 is an extension of the 10M bps 
Ethernet standard with the ability totransmit and receive data at 100M bps, while maintaining the Carrier Sense 
Multiple Access with Collision Detection (CSMA/CD) Ethernet protocol. 



Gigabit Ethernet Technology 



Gigabit Ethernet is an extension of IEEE 802.3 Ethernet utilizing the same packet structure, format, and support for 
CSMA/CD protocol, full duplex, flow control, and management objects, but with a tenfold increase in theoretical 
throughput over 100Mbps Fast Ethernet and a one hundred-fold increase over 10Mbps Ethernet. Since it is compatible 
with all 10Mbps and 100Mbps Ethernet environments, Gigabit Ethernet provides a straightforward upgrade without 
wasting a company's existing investment in hardware, software, and trained personnel. 

The increased speed and extra bandwidth offered by Gigabit Ethernet is essential to coping with the network bottlenecks 
that frequently develop as computers and their busses get faster and more users use applications that generate more 
traffic Upgrading key components, such as your backbone and servers to Gigabit Ethernet can greatly improve network 
response ti mes as wel I as si gn if i cantl y speed u p the traffi c between you r su bnets. 

Gigabit Ethernet enables fast optical fiber connections to support video conferendng, complex imaging, and similar data- 
intensive applications. Likewise, since data transfers occur 10 times faster than Fast Ethernet, servers outfitted with 
Gigabit Ethernet N I C's are ableto perform 10 times the number of operations in the same amount of time. 

In addition, the phenomenal bandwidth delivered byGigabit Ethernet is the most cost-effective method to take advantage 
of today and tomorrow's rapidly improving switching and routing internetworking technologies. And with expected 
advances in the coming years in silicon technology and digital signal processing that will enable Gigabit Ethernet to 
eventually operate over unshielded twisted-pair (UTP) cabling, outfitting your network with a powerful 1000M bps-capable 
backbone/server connection creates a flexiblefoundation for the next generation of network technology products. 
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Switching Technology 



Another key development pushi ng the I i mits of Ethernet technology is i n the field of switching technology. A switch bridges 
Ethernet packets at the MAC address level of the Ethernet protocol transmitting among connected Ethernet or fast 
Ethernet LAN segments. 

Switching is a cost-effective way of increasing the total network capacity available to users on a local area network. A 
switch increases capadty and decreases network loading by making it possiblefor a local area network to be divided into 
different segments which don't compete with each other for network transmission capacity, giving a decreased load on 
each. 

The switch acts as a high-speed selective bridge between the individual segments. Traffic that needs to go from one 
segment toanother (from one port to another) is automatically forwarded by theswitch, without interfering with any other 
segments (ports). This allows the total network capadty to be multiplied, while still maintaining the same network 
cabl i ng and adapter cards. 

Fa Fast Ethernet or Gigabit Ethernet networks, a switch is an effective way of eliminating problems of chaining hubs 
beyond the 'two-repeater limit." A switch can be used to split parts of the network into different collision domains, for 
example, making it possible to expand your Fast Ethernet network beyond the 205-meter network diameter limit for 
100BASE-TX networks. Switches supporting both traditional 10Mbps Ethernet and 100Mbps Fast Ethernet are also ideal 
for bridging between existing 10M bps networks and new 100M bps networks. 

Switching LAN technology is a marked improvement over the previous generation of network bridges, which were 
characterized by higher latencies. Routers have also been used to segment local area networks, but the cost of a router and 
the setup and maintenance required make routers relatively impractical. Today's switches are an ideal solution to most 
kinds of local area network congestion problems. 



Features 



The DES-3225G Switch was designed far easy installation and high performance in an environment where traffic on the 
network and the nu mber of users i ncrease conti nuously. 

Switch features include: 

Ports 

♦ 24 high performance NWay ports all operating at 10/100 M bps for connecting to end stations, servers, and hubs (22 
M Dl -X 10/100 Ethernet UTP ports and 2 MDI -I I Uplink ports). 

♦ All ports can auto-negotiate (NWay) between 10M bps/ 100M bps, half-duplex or full duplex and flow control. 

♦ One optional rear panel slide-in module interface for a 1-port 1000BASE-SX Gigabit Ethernet module, a 1-port 
1000BASE-LX Gigabit Ethernet module, or a 1-port 1000BASE-T Gigabit Ethernet module, for connecting to 
another switch. 

♦ One slide-in module interface in the front panel for 1 a 2 port 10/100M Ethernet connection. Three modules are 
available: 2 ports TX module, 2 ports FX MT-RJ type module and 1 port FX SC type module. 

♦ RS-232 DCE Diagnostic port (console port) for setting up and managing the Switch via a connection to a console 
terminal or PC using a terminal emulation program. 
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Performance features 

♦ Store and forward switching scheme capability to support rate adaptation and protocol conversion. 

♦ Full- and half-duplex for both 10M bps and 100M bps connections. ThelOOOBASE-SX and 1000BASE-LX Gigabit 
Ethernet modules operate at full duplex only whilethelOOOBASE-T Gigabit Ethernet modulecan alsooperatein 
half-duplex mode when auto negotiate is selected. Full duplex allows the switch port to simultaneously transmit 
and receive data, and only works with connections to full-duplex capableend stations and switches. Connections to 
hubs must take pi ace at half duplex. 

♦ Auto-polarity detection and correction of incorrect polarity on the receive twisted-pair at each port. 

♦ Data forwardi ng rate 14,880 pps per port at 100% of wi re-speed for 10M bps speed. 

♦ Data forwardi ng rate 148,800 pps per port at 100% of wi re-speed for 100M bps speed. 

♦ Data fi Iteri ng rate el i mi nates al I error packets, runts, etc. at 14,880 pps per port at 100% of wi re-speed for 10M bps 
speed. 

♦ Data fi Iteri ng rate el i mi nates al I error packets, runts, etc at 148,800 pps per port at 100% of wi re-speed fa 
100M bps speed. 

♦ 12K active MAC address entry table per device with automatic learning and aging (10 to 1000000 seconds). 

♦ 12 M B packet buffer per device 

♦ Broadcast storm filtering. 

♦ I GMP Multicast support. 

♦ 802.1Q VLANs. 

♦ GARP/GVRP, GARP/GM RP support. 

♦ DHCP Client. 

♦ 802.1p Priority Queues. 

Management 

♦ RS-232 console pat fa out-of-band netwak management via a console terminal a PC. 

♦ SpanningTreeAlgaithmPrrtocol fa creatia of altanative backup paths and preventia of netwak loops. 

♦ Fully configurableeither in-band a out-of-band ooitrol via SNMP-based software. 

♦ Flash memory fa software upgrades. This can bedaein-band viaTFTP. 

♦ Built-in SNMP management: BridgeMIB (RFC 1493), RMON MIB (RFC 1757), MIB-II (RFC 1213), Entity MIB 
vasia 2 (RFC 2737), and Proprietary Ml Bs. 
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Unpacking and Setup 

This chapter provides unpacking and setup information for the Switch. 



Unpacking 

Open the shipping carton of the Switch and carefully unpack its contents. The carton should contain the following items: 

♦ OneDES-3225G 24-port NWay Ethernet Switch 

♦ One 2-port 100BASE-TX Fast Ethernet module preinstalled on front panel (DES-3225GF indudes a 1-port 
100BASE-FX module preinstalled). 

♦ Oneconsolecable 

♦ M ounti ng kit: 2 mounti ng brackets and screws 

♦ Four rubber feet with adhesive backing 

♦ One AC power cord 

♦ This User's Guidewith Registration Card 

If any item is found missing or damaged, pi ease contact your local D-Link reseller for replacement. 



Installation 

Use thefollowing guidelines when choosing a pi ace to install theSwitch: 

♦ Thesurface must support at least 3 kg. 

♦ The power outlet should bewithin 1.82 meters (6 feet) of the device. 

♦ Visual ly inspect the power cord and see that it is secured to the AC power connector. 

♦ Make sure that there is proper heat dissipation from and adequate ventilation around the switch. Do not place 
heavy objects on the switch. 

Desktop or Shelf Installation 

When installing the Switch on a desktop or shelf, the rubber feet induded with the device should first be attached. Attach 
these cushioning feet on the bottom at each corner of the device. Allow adequate space for ventilation between the device 
and theobjects around it. 
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Figure 2-1 . Installing rubber feet for desktop installation 



Rack Installation 

TheDES-3225G can be mounted in an El A standard-sized, 19-inch rack, which can be placed in a wiring closet with other 
equipment. To install, attach the mounting brackets on the switch's side panels (one on each side) and secure them with 
the screws provided. 




Figure 2- 2A. Attaching the mounting brackets to the switch 

Then, use the screws provided with the equipment rack to mount the switch on the rack. 




Figure 2-2B. Installing the switch on an equipment rack 



Unpacking and Setup 
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Power on 

TheDES-3225G switch can be used with AC power supply 100- 240 VAC, 50/60 Hz. TheSwitch's power supply will adjust 
tothelocal power sourceautomaticallyand may be used without having any or all LAN segment cables connected. 

After the switch is plugged in, the LED indicators should respond as follows: 

♦ All LED indicators will momentarily blink. This blinking of the LED indicators represents a reset of the system. 

♦ The power LED indicator will blink while the Switch loads onboard software and performs a self-test. After 
approximately 20 seconds, the LED will light again to indicate the switch isin a ready state. 

♦ TheconsdeLED indicator will remainON if thereis a connection at theRS-232 port, otherwisethis LED indicator 
isOFF. 

♦ ThelOOM LED indicator may remain ON or OFF depending on thetransmission speed. 

Power Failure 

Asa precaution, in the event of a power failure unplug the switch. When power is resumed, plug the switch back in. 
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Identifying External Components 



This chapter describes the front panel, rear panel, optional plug-in modules, and LED indicators of the DES-3225G. 



Front Panel 



The front panel of theSwitch consists of LED indicators, an RS-232 communication port, a slide-in module slot, two uplink 
ports, and 22 (10/100 M bps) Ethernet/Fast Ethernet ports. 



Figure 3-1. Front panel view of the Switch 



♦ Comprehensive LED indicators display the status of the switch and the network. A description of these LED 
indicators follows (seethe LED Indicators section below). 

♦ An RS-232 DCE console pat for setting up and managing the switch via a connection toa console terminal or PC 
using a terminal emulation program. 

♦ A front-panel slide-in module slot for 10/100 M bps Ethernet ports can accommodate a 2-port 10/100BASE-TX Fast 
Ethernet module, a 2-port 100BASE-FX MT-RJ type module, or a 1-port 100BASE-FX SC type module. 

♦ TwoMDI-ll Uplink jacks which can be used to connect a straight-through cable toa normal (non-Uplink) port on a 
switch or hub. Do not use port IX if thetop Uplink port is occupied or Pat 2X if the bottom Uplink port is occupied. 

♦ Twenty-two high-pafamance, NWay Ethernet ports all of which operate at 10A00 Mbps fa connectias to end 
stations, servers and hubs. All ports can auto-negptiate between 10M bps a 100M bps, full- a half-duplex, and flow 
control. 



Rear Panel 



The rear panel of the switch consists of a sia fa an optiaal Gigabit Ethernet fiber port and an AC power canecta. The 
foil owing displays the rear panel of the switch. 




Figure 3-2. Rear panel view of the Switch 
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Figure 3-3. Rear panel view of the Switch fitted with the optional Gigabit Ethernet slide-in module 

♦ Theoptional Gigabit Ethernet slide-in module (1000BASE-SX, 1000BASE-LX, or 1000BASE-T) contains one port 
for connecting to another switch. 

♦ The AC power connector is a standard three-pronged connector that supports the power cad. Plug-in the female 
connector of the provided power cord into this socket, and the male side of the cord into a power outlet. Supported 
input voltages rangefrom 100 -240 VAC at 50 -60 Hz. 



Side Panels 



The right side panel of the Switch contai ns two system fans (see the top part of the diagram below). The left side panel 
contai ns heat vents. 
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Figure 3-4. Side panel views of the Switch 



♦ The system fans are used to dissipate heat. The sides of the system also provide heat vents to serve the same 
purpose. Do not block these openings, and leave at least 6 inches of space at the rear and sides of the switch for 
proper ventilation. Be reminded that without proper heat dissipation and air circulation, system components might 
overheat, which could lead to system failure. 



Optional Plug-in Modules 



The DES-3225G 24-port NWay Ethernet Switch is able to accommodate a range of plug-in modules in order to increase 
functionality and performance. 
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100BASE-TX Module 




Figure 3-5. Two-port, 100BASE-TX module 



♦ Two-port, front-panel module 

♦ Connects to 100BASE-TX devices at full- or half-duplex. 

♦ Supports Category 5 UTP or STP cableconnections of up to 100 meters. 

100BASE-FX (SC) Fiber Module 




Figure 3-6. One-port, 100BASE-FX (SC) module 

♦ One-pat, front-panel module 

♦ Connects to 100BASE -FX devices at full- or half-duplex. 

♦ Supports multi-mode fiber-optic cableconnections of up to 412 meters in half-duplex or 2 km in full-duplex mode. 

100BASE-FX (MT-RJ) Fiber Module 




Figure 3-7. Two-port, 100BASE-FX (MT-RJ) module 
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♦ Two-port, front-panel module 

♦ Connects to 100BASE -FX devices at full -or half-duplex. 

♦ Suppcrts multi-mode fiber-optic rablec^ meters in half duplex or 2 km in full duplex mode. 

1000BASE-SX Gigabit Module 




1 perl iigab.1 M«mi 6 

Figure 3-8. One-port, 1000BASE-SX module 

♦ One-pat, rear-panel module. 

♦ Connects to 1000BASE-SX devices at full duplex or auto (auto negotiation isavailablein DES-3251G, version A3 and 
later). 

♦ Al lows connections using multi -mode fiber optic cable in thefol lowing configurations: 









50pm 50u m 


Medal bandwidth 
(min. overfilled launch) 
Unit: MHz*km 


160 


200 


400 


500 


Operating distance 
Unit: meters 


220 


275 


500 


550 


Channel insertion loss 
Unit: dB 


2.33 


2.53 


3.25 


3.43 



1000BASE-LX Gigabit Module 
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Figure 3-9. One-port, 1000BASE-LX module 

♦ One-pat, rear-panel module. 

♦ Connects to 1000BASE-LX devices at full duplex or auto (auto negrtiation isavailablein DES-3251GL, version A3 and 
later). 



10 



Identifying External Components 



24-port NWay Ethernet Switch User's Guide 



♦ Allows connections up to 5 km in length using single-mcdefiberopticcable. 

1000BASE-T Copper Gigabit Module 




1 PC'I 1«3l«E-TMcajl? 

Figure 3-10. One-port, 1000BASE-T module 



♦ One-port, rear-panel module. 

♦ Connects to 1000BASE-T devices at lOOOM/full duplex, lOOM/full duplex, lOOM/half duplex, and Auto. 

♦ Supports Category 5+or higher cableconnectionsof uptolOOmeters. 



LED Indicators 



TheLED indicators of the Switch include Power, Console, Slot2, Giga, Speed, and Link/Act. The following shows the LED 
indicators for the Switch along with an explanation of each indicator. 



D£S-322!>E 



WWfnt ftiiifSiiSwltiA 



4fr 

l«H £]□□□□□□□□□□□□ 
I il 1 ■} £ f 1t 11 ifiifl 17 19 in 
UDDODDCDDDaDD 

inDDDDaaDDDDS 



D-Link fcr-- 



□ □CD 



Figure 3-11. The LED indicators 



♦ Power This indicator on the front panel should be colored amber during the Power-On Self Test (POST). It will 
I ight green approxi mately 2 seconds after the switch is powered on to i ndicate the ready state of the device. The L E D 
will blink green whiledownloading new software for the switch, or if the system's configuration has changed and will 
light yellow when an error occurs. 

♦ ConsoleThis indicator is lit green when the switch is being managed via out-of-band/local console management 
through the RS-232 console port using a straight-through serial cable. 

♦ Slot 2 This indicator is lit green when a Gigabit Ethernet slide-in module is present in the rear panel of the 
Switch. 

♦ Giga This indicator is lit green when a link is established. It blinks green when the Gigabit port is active. 

♦ 100M These indicators are illuminated green when a 100 M bps device is connected to any of the 24 ports or uplink 
port. If a 10 M bps device is connected toany of the 24 ports or uplink port, these LEDs remain dark. 

♦ Link/Act These indicators are lit when there is a secure connection (or link) to a device at any of the pats. The 
LEDs blink whenever there is reception or transmission (i.e. Activity-Act) of data occurring at a port. 
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Connecting The Switch 



This chapter describes hew to connect theDES-3225G to your Fast Ethernet network. 



Switch to End Node 



End nodes indude PCs outfitted with a 10, 100 or 10/100 M bps RJ -45 Ethernet/Fast Ethernet Network Interface Card 
(NIC) and most routers. The RJ -45UTP ports on NICsand most routers are MDI -I I. When using a normal straight-through 
cable, an MDI -I I port must connect to an MDI -X port. 

An end node can be connected totheSwitch via a two-pair Category 3, 4, 5 UTP/STP straight cable(besuretouseCategory 
5 UTP or STP cabling for 100 Mbps Fast Ethernet connections). Theend node should be connected to any of thetwenty-two 
ports (lx - 22x) of the DES-3225G or to either of the two 100BASE-TX ports on the front-panel module that came 
preinstalled on the switch. An end node should not be connected to an Uplink port (unless using a crossover cable), and if 
thetop Uplink port is in use, Port IX must remain vacant; if the bottom Uplink port is in use, Port 2X cannot be used. 
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Figure 4-1. Switch connected to an End Node 



The LED indicators for the port the end node is connected to are lit according to the capabilities of the NIC. If LED 
indicators are not illuminated after making a proper connection, check the PC's LAN card, thecable, switch conditions, and 
connections. 

The following LED indicator states are possiblefor an end node to switch connection: 
L The 100M LED indicator comesON fa a 100 M bps and staysOF F for 10 M bps. 
2. The Link/Act LED indicator lights up upon hooking up a PC that is powered on. 



Switch to Hub or Switch 



These connections can be accomplished in a number of ways. The most important consideration is that when using a 
normal, straight-through cable, the connection should be made between a normal crossed pat (Port IX, 2X, etc) and an 
Uplink (MDI -I I) port. If you are using a crossova cable, theannectia must be made from Uplink to Uplink, or fron a 
crossed port toanrtha crossed pat. 

♦ A 10BASE-T hubaswitch can becoinected totheSwitch via a two-pair Categay 3, 4a 5 UTP/STP straight cable. 
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♦ A 100BASE-TX hub a switch can be connected to the Switch via a two-pair Category 5 UTP/STP straight cable. 

If the other switch or hub contains an unused Uplink port, we suggest connecting the other device's Uplink (MDI-II) port to 
any of the switch 's(MDI-X) ports (lx - 22x, or one of the 100BASE-TX module ports) using a normal straight-through cable, 
as shewn below. 



If the other device does not have an unused Uplink port, make the connection with a normal straight-through cablefrom 
one of the Uplink ports on the switch toany normal crossed port on the hub. Alternatively, if you havea crossover cable you 
can savethe Uplink ports for other connections and make this one from a crossed porttoanother crossed port. 



3 '.■Il/ Jil'i ^^VIII^HI 




Figure 4-2. 



Switch connected to a normal (non-Uplink) port on a hub or switch using a straight or crossover 

cable 



10BASE-T Device 

Fa a 10BASE-T device, theSwitch's LED indicators should display the following: 

♦ 100M LED speed indicator isOFF. 

♦ Link/Act indicator is ON . 

100BASE-TX Device 

Fa a 100BASE-TX device, theSwitch's LED indicatas should display the foil owing: 

♦ 100M LED speed indicata isON. 

♦ Link/Act isON. 
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Switch Management Concepts 



This chapter discusses many of the features used to manage the switch, and explains many concepts and important points 
regardi ng these features. Configuri ng the switch to i mplement these concepts is discussed in detai I i n the next chapters. 



Local Console Management 



Local console management involves the administration of the DES-3225G Switch via a direct connection to the RS-232 
DCE console port. This is an Out-Of-Band connection, meaning that it is on a different circuit than normal network 
communications, and thus works even when the network is down. 

The local console management connection involves a terminal or PC running terminal emulation software to operate the 
switch's built-in console program (see Chapter 6, "Using the Console I nterface"). Using the console program, a network 
administrator can manage, control and monitor the many functions of the Switch. 

Hardware components in the Switch allow it to be an active part of a manageable network. These components include a 
CPU, memory for data storage, other related hardware, and SNMP agent firmware Activities on the Switch can be 
monitored with these components, whilethe Switch can be manipulated to carry out specific tasks. 

Diagnostic (console) port (RS-232 DCE) 

Out-of-band management requires connecting a terminal, such as a VT-100 a a PC running terminal emulation program 
(such as HyperTerminal, which is automatically installed with Microsoft Windows) a to the RS-232 DCE console port of 
the Switch. Switch management using the RS-232 DCE console pat is called Local Console Management to differentiate 
it from management done via management platforms, such as D-View, H P OpenView, etc. 

The consd e port i s set for t he fol I owi ng conf i gu rati on : 



0 Baud rate: 9,600 

0 Data width: 8 bits 

0 Parity: none 

0 Stop bits: 1 

0 Flow Control None 



Makesuretheterminal or PC you are using to make this connection is configured to match these settings. 

If you are having problems making this connection on a PC, make sure the emulation is set to VT-100 or ANSI. If you 
sti 1 1 don t see anyth i ng, try hitting <Ctrl > + r to refresh the screen. 
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IP Addresses and SNMP Community Names 



Each Switch has its own I P Address, which is used for communication with an SNMP network manager or other TCP/I P 
application (for example BOOTP, TFTP). You can change the default Switch IP Address to meet the specification of your 
networking address scheme. 

I n addition, you can also set an I P Address for a gateway router. This becomes necessary when the network management 
station is located on a different I P network as the Switch, making it necessary for management packets to go through a 
router to reach the network manager, and vice versa. 

For security, you can set in the Switch a list of IP Addresses of the network managers that you allow to manage the Switch. 
You can also change the default Community Name in the Switch and set access rights of these Community Names. 



Traps 



Traps are messages that alert you of events that occur on the Switch. The events can be as serious as a reboot (someone 
acddentally turned OFF the Switch), or less serious like a pat status change. The Switch generates traps and sends them 
tothe network manager (trap managers). The following lists thetypes of events that can take place on the Switch. 

0 System resets 

0 Errors 

0 Status changes 

0 Topology changes 

0 Operation 

You can also spedfy which network managers may receive traps from the Switch by setting a list of I P Addresses of the 
authorized network managers. 

Trap managers are special users of the network who are given certain rights and access in overseeing the maintenance of 
the network. Trap managers will receive traps sent from the Switch; they must immediately take certain actions to avoid 
future failure or breakdown of the network. 

Thefollowing are trap types a trap manager will receive: 

♦ Cold Start This trap signifies that the Switch has been powered up and initialized such that software settings 
are reconfigured and hardware systems are rebooted. A cold start is different from a factory reset. 

♦ Warm Start This trap signifies that the Switch has been rebooted, however the POST (Power On Self-Test) is 
skipped. 

♦ Authentication Failure This trap signifies that someone has tried to logon to the switch using an invalid 
SNMP community name. The switch automatical ly stores thesource IP address of the unauthorized user. 

♦ New Root This trap indicates that the Switch hasbecomethenewrootoftheSpanningTree,thetrapissentbya 
bridge soon after its election as the new root. This implies that upon expiration of the Topology Change Timer the 
new root trap is sent out immediately after the Switch's selection as a new root. 

♦ Topology Change A Topology Change trap is sent by the Switch when any of its configured ports transitions 
from the Learni ng state to the Forwarding state, or from the Forwarding state to the Blocking state. The trap is not 
sent if a new root trap is sent for the same transition. 
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♦ Link Change Event This trap is sent whenever the I ink of a port changes from link up to link down or from link 
down to I ink up. 

♦ Port Partition This trap is sent whenever a pat is partitioned as a result of more than sixty-one collisions on 
the port (i.e., it is automatically partitioned). The number of collisions that triggers this trap is the same at either 
10M bps or 100M bps. 

♦ Broadcast Storm This trap is sent whenever the port reaches the broadcast storm rising or falling threshold. 

♦ Address Table Full This trap is sent whenever the MAC Address Tableisfull. 

♦ Entity MIB Change Thistrapissentwhenevera MIB object of Entity Ml B version 2(RFC 2737) ischanged. 



MIBs 



Management information and counters are stored in the Switch in the Management Information Base (MIB). The Switch 
uses the standard M I B-l I Management I nformation Base module. Consequently, values for M I B objects can be retrieved 
from any SNMP-based network manager software In addition to the standard Ml B-l I, the Switch also supports its own 
proprietary enterprise MIB as an extended Management Information Base. These MIBs may also be retrieved by 
spedfying the M I B's Object-I dentity (01 D) at the network manager. M I B values can be either read-only or read-write. 

Read-only M I Bs variables can be either constants that are programmed into the Switch, or variables that change while the 
Switch is in operation. Examples of read-only constants are the number of pats and types of ports. Examples of read-only 
variables are the statistics counters such as the number of eras that have occurred, a how many kilobytes of data have 
been received and fawarded through a pat. 

Read-write M I Bs are variables usually related to user-customized configurations. Examples of these are the Switch's I P 
Address, SpanningTreeAlgaithm parameters, and pat status. 

If you use a third-party vendas'SN MP software to manage the Switch, a diskette listing the Switch's propriety enterprise 
M I Bs can be obtai ned by request. I f your software provides functias to browse a modify M I Bs, you can also get the M I B 
values and change them (if the MIBs' attributes permit the write operation). This process however can be quite involved, 
si nee you must knowtheMIB OlDsand retrievethemonebyae 



Packet Forwarding 



The Switch learns the netwak ccnfiguratiai and uses this infamatiat to faward packets. This reduces the traffic 
caigestiat ai the netwak, because packets, instead of being transmitted to all segments, are transmitted to the 
destination only. Example: if Pat 1 receives a packet destined fa a station or\ Port 2, the Switch transmits that packet 
through Pat 2aly, and transmits nahing through theaher pats. 

Aging Time 

The Aging Time is a parameter that affects the auto-learn praess of the Switch in terms of the netwak cafiguratiai. 
Dynamic Entries, which make up the auto-learned-node address, are aged out of the address table accading to the Aging 
Time that you set. 

The Aging Time can be from 10 secads to 1000000 seconds. A very lag Aging Time can result with the out-of-date 
Dynamic Entries that may causeincarect packet filtering/fawarding dedsias. 
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In the opposite case if the Aging Time is too short, many entries may be aged out soon, resulting in a high percentage of 
received packets whose source addresses cannot be found in the address table, in which case the switch will broadcast the 
packet to al I ports, negati ng many of the benefits of havi ng a switch. 

Filtering Database 

A switch uses a filtering database to segment the network and control communications between segments. It also 
filters packets off the network for intrusion control (MAC Address filtering). 

For port filtering, each port on the switch is a unique collision domain and the switch filters (discards) packets whose 
destination lies on the same port as where it originated. This keeps local packets from disrupting communications on 
other parts of the network. 

For intrusion control, whenever a switch encounters a packet originating from or destined toa MAC address defined by 
the user, the switch will discard the packet. 

Filtering indudes: 

1. Dynamic filtering - automatic learning and aging of MAC addresses and their location on the network. Filtering 
occurs to keep local traffic confi ned to its segment. 

2. MAC address filtering- the manual entry of specific MAC addresses to be filtered from the network. 

3. Filtering done by the Spanning Tree Protocol, which can filter packets based on topology, making sure that signal 
loops don't occur. 

4. Filtering donefor VLAN integrity. Packets from a member of a VL AN (VLAN 2, for example) destined for a device 
on another VLAN (VLAN 3) will befiltered. 



Spanning Tree Algorithm 



TheSpanningTreeAlgorithm(STA) in the Switch allows you to create alternative paths (with multiple switches or other 
types of bridges) in your network. These backup paths are idle until the Switch determines that a problem has developed 
in the primary paths. When a primary path is lost, the switch providing the alternative path will automatically go into 
service with nooperator intervention. This automatic network reconfiguration provides maximum uptime to network users. 
The concept of the Spanning Tree Algorithm is a complicated and complex subject and must be fully researched and 
understood. Please read thefdlowing before making any changes. 

♦ Network loop detection and prevention With STA, there will be only one path between any two LANs. If 

there is more than one path, forwarded packets will loop indefinitely. STA detects any looped path and selects the 
path with thelowest path cost as the active path, whileblocking the other path and using it as the backup path. 

♦ Automatic topology re-configuration When the path for which there is a backup path fails, the backup 
path will be automatically activated, and STA will automatically re-configure the network topology. 

SLA Operation Levels 

STA operates on two levels: the bridge level and the port level. On the bridge level, STA calculates the Bridge I dentifier for 
each Switch, then sets the Root Bridge and the Designated Bridges. On the port level, STA sets the Root Port and 
Designated Ports. Details are as follows: 
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On the Bridge Level 

♦ Root Bridge The switch with the lowest Bridge Identifier is the Root Bridge Naturally, you will want the Root 
Bridge to be the best switch among the switches in the loop to ensure the highest network performance and 
reliability. 

♦ Bridge Identifier This is the combination of the Bridge Priority (a parameter that you can set) and the MAC 
address of the switch. Example: 4 00 80 C8 00 01 00, where 4 is the Bridge Priority. A lower Bridge Identifier 
results in a higher priority for theswitch, and thus increases it probably of being selected as the Root Bridge. 

♦ Designated Bridge From each LAN segment, the attached Bridge that has the lowest Root Path Cost to the 
Root Bridge is the Designated Bridge It forwards data packets for that LAN segment. I n cases where all Switches 
have the same Root Path Cost, theswitch with the lowest Bridge Identifier becomes the Designated Bridge. 

♦ Root Path Cost The Root Path Cost of a switch is the sum of the Path Cost of the Root Port and the Root Path 
Costs of all theswitches that the packet goes through. The Root Path Cost of the Root Bridge is zero. 

♦ Bridge Priority This is a parameter that users can set. The smaller the number you set, the higher the Bridge 
P ri ority i s. The higher the Bridge P riority, the better the chance the Switch wi 1 1 be selected as the Root B ridge. 

On the Port Level 

♦ Root Port Each switch has a Root Port. This is the port that has the lowest Path Cost to the Root Bridge. In case 
there are several such ports, then the one with the lowest Pat Identifier is the Root Port. 

♦ Designated Port This is the port on each Designated Bridge that is attached to the LAN segment for which the 
switch is the Designated Bridge. 

♦ Port Priority The smaller this number, the higher the Port Priority is. With higher Port Priority, the higher the 
probabi I ity that the port wi 1 1 be selected as the Root Port. 

♦ Path Cost This is a changeable parameter and may be modified according to STA specifications. Each 10M bps 
segment has an assigned Path Cost of 100, each 100M bps segment has an assigned Path Cost of 19, and the 
1000M bps segment has an assigned Path Cost of 4. Please note if port trunking is enabled, these values will change 
dynamically. 

User-Changeable STA Parameters 

The factory default setting shouldcover the majority of installations. However, it is advisabletokeepthedefault settings 
as set at the factory; unless, it is absolutely necessary. The user changeable parameters in the Switch are as follows: 

♦ Bridge Priority A Bridge Priority can be from 0 to 65535. 0 is equal to the highest Bridge Priority. 

♦ Bridge Hello Time The HelloTimecan befrom 1 to 10 seconds. This istheinterval between two transmissions 
of BPDU packets sent by the Root Bridge to tell all other Switches that it is indeed the Root Bridge. If you set a 
Hello Time fa your Switch, and it is nrt the Root Bridge, the set Hello Time will be used if and when your Switch 
becomes the Root Bridge. 

Note: The H el loTi me cannot be lager than the Max. Age. Otherwise, a configuratia erra will acur. 

♦ Bridge Max. Age TheMax. Agecan befrom 6 to 40 secads. At the end of the Max. Age, if a BPDU has still not 
been received from the Root Bridge, your Switch will start sending its own BPDU to all other Switches fa 
permissia to become the Root Bridge. If it turns out that your Switch has the lowest Bridge Identifier, it will 
become the Root Bridge 

♦ Bridge Forward Delay TheFaward Delaycan befran4to30secads.ThisisthetimeanypatatheSwitch 
spends i n the I i sten i ng state whi le movi ng from the bl aki ng state to the fawardi ng state. 
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Observethefdlowing formulas when you set the above parameters: 

1. Max. Age 2 x(Forward Delay -1 second) 

2. Max. Age 2 x (HelloTime+1 second) 

♦ Port Priority A Pat Priority can be from 0 to 255. The lower the number, the greater the probability the port 
will be chosen as the Root Port. 



Illustration of STA 

A simple illustration of three Bridges (or the Switch) connected in a loop is depicted in Figure5-1. In this example, you can 
anticipate some major network problems if the STA assistance is not applied. For instance, if Bridge 1 broadcasts a 
packet to Bridge 2, Bridge 2 will broadcast it to Bridge 3, and Bridge 3 will broadcast it to Bridge l...and so on. The 
broadcast packet will be passed indefinitely in a loop, causing a serious network failure. 

To alleviate network loop problems, STA can be applied as shown in Figure 5-2. 1 n this example, STA breaks the loop by 
blocking the connection between Bridge 1 and 2. The dedsion to block a particular connection is based on the STA 
calculation of the most current Bridge and Pat settings. Now, if Bridge 1 broadcasts a packet to Bridge 3, then Bridge 3 
will broadcast it to Bridge 2 and the broadcast will end there. 

STA setup can be somewhat complex. Therefae, you are advised to keep the default factory settings and STA will 
automatically assign root bridges/ports and block loop connections. However, if you need to customize the STA parameters, 
refer to Table 5-1. 
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LAN 1 



JAjoc Pa i 



| l\j-t I | 
TV Idgr. I 



Pi» n : 



LAN 2 



Tkr.:--r,rrlr.l Tt*-t 







1 1 








P-n-i 2 





LAN 3 



lEacl IVj.h CuM. ICO 



Bi--I Fil.li C.»st: 

Hr-drc 1 1) - 1 & 



ne>3e-;.77F.* Pj [ 
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Bridge Priority 


lower the #, 
higher the 
priority 


Increases chance 
of becoming the 
Root Bridge 


Avoid, if the switch 
is used in workgroup 
level of a large 
network 


Hello lime 


1 - 1U sec. 


No effect, if not 
Root Bridge 


Never set greater 
than Max. Age Time 


Max. Age Time 


6 - 40 sec. 


Compete for Root 
Bridge, if BPDU 
is not received 


Avoid low number 
for unnecessary reset 
of Root Bridge 


Forward Delay 


4 - 30 sec. 


High # delays the 
change in state 


Max. Age < 2 x 
(Forward Delay - 1) 
Max. Age > 2 x 
(Hello Time+ 1) 


Port Level STA parameters 


Enable / Disable 


Enable / 
Disable 


Enable or disable 
this LAN segment 


Disable a port for 
security or problem 
isolation 


Port Priority 


lower the #, 
higher the 
priority 


Increases chance 
of become Root 
Port 





Table 5-1. User-selective STA parameters 



Port Trunking 



Pat trunking is used to combine a number of ports together to make a single high-bandwidth data pipeline. The 
participating parts are called members of a trunk group, with one port designated as the master of the group. Since all 
members of the trunk group must be configured to operate in the same manner, all settings changes made to the master 
port are applied to all members of the trunk group. Thus, when configuring the ports in a trunk group, you only need to 
configure the master port. 

TheDES-3225G supports 3 trunk groups, which may include from 2 to 8 switch ports each, except for the third trunk group 
which consists of the 2 ports of the Slot 1, 100BASE-TX or 100BASE-FX front-panel module. The master port for the first 
group is preset as port 7, the master port for the second group is port 15 and the master port for the third group is the first 
port (lx) on the2-port module. 
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Figure 5-3. Port trunking example 

The switch treats al I ports in a trunk group as a single port. As such, trunk ports wi 1 1 not be blocked by Spanni ng Tree. 

Data transmitted toa specific host (destination address) will always be transmitted over the same port in a trunk group. 
This allows packets in a data stream to arrive in the same order they were sent. A trunk connection can be made with any 
other switch that maintains host-to-host data streams over a single trunk port. Switches that usea load-balancing scheme 
that sends the packets of a host-to-host data stream over multiple trunk ports cannot have a trunk connection with the 
DES-3225G switch. 



VLANs and Broadcast Domains 



VLANsarea collection of users or switch ports grouped together in a secure, autonomous broadcast and multicast domain. 
The main purpose of setting up VLANs or a broadcast domain on a network is to limit the range and effects of broadcast 
packets. 

Two types of VLANs are implemented on the Switch: 802.1Q VLANs and port-based VLANs. MAC-based broadcast 
domains area third option. Only one type of VLAN or broadcast domain can be active on the Switch at any given time, 
however. Thus, you will need to choose the type of VLAN or broadcast domain you wish to setup on your network and 
configure the Switch accordingly. 802.1Q VLANs support IEEE 802.1Q tagging, which enables them to span the entire 
network (assuming all switches on the network are IEEE 802.1Q-compliant). I n contrast, MAC-based broadcast domains 
are limited tothe Switch and devices directly connected to them. 

All VLANs allow a network to be segmented in order to reduce the size of broadcast domains. All broadcast, multicast, 
and unknown packets entering the Switch on a particular VLAN will only be forwarded to the stations or ports (802.1Q 
and port-based) that are members of that VLAN. 802.1Q and port-based VLANs also limit unicast packets to members of 
the VLAN, thus providing a degree of security to your network. 

Another benefit of 802.1Q and port-based VLANs is that you can change the network topology without physically moving 
stations or changing cable connections. Stations can be 'moved' to another VLAN and thus communicate with its members 
and share its resources, simply by changing the port VLAN settings from one VLAN (the sales VLAN, for example) to 
another VLAN (the marketing VLAN). This allows VLANs to accommodate network moves, changes and additions with 
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the utmost flexibility. MAC-based broadcast domains, on the other hand, allow a station to be physically moved yet still 
belong tothesame broadcast domain without havi ng tochangeand configuration setti ngs. 

Theuntagging feature of IEEE 802.1Q VLANs allows VLANs to work with legacy switches that don't recognize VL AN 
tags in packet headers. The tagging feature allows VLANs to span multiple 802.1Q-compliant switches through a single 
physical connection and allows Spanning Tree to be enabled on all ports and work normally (BPDU packets are not 
tagged). 

MAC-based Broadcast Domains 

The Switch supports up to 12 MAC-based broadcast domains, which are by their nature, limited to the Switch itself and 
the devices connected di rectly to it. 

Si nee MAC addresses are hard-wired into a station's network interface card (NIC), MAC-based broadcast domains enable 
network managers to move a station to a different physical location on the network and have that station automatically 
retain its broadcast domain membership. This provides the network with a high degree of flexibility si nee even notebook 
PC's can plug into any available port on a network and communicate with the same people and use the same resources 
that have been allocated to the broadcast domain in which it is a member. 

Since MAC-based broadcast domains do not restrict the transmission of known unicast frames to other broadcast 
domains, they can only be used to define limited broadcast domains. As such, they are best implemented on networks 
where stations are frequently moving, for example where people using notebook PCs are constantly plugging into different 
parts of the network. 

Setting up MAC-based broadcast domains isa relatively straightforward process. Simply create the broadcast domain by 
assigning it a name (description) and add MAC addresses for the stations that will be members. 

802.1 Q VLANs 

The Switch supports up to 2000 802.1Q VLANs. 802.1Q VLANs limit traffic that flows into and out of switch ports. Thus, 
al I devices connected to a port are members of the VL AN (s) the port belongs to, whether there is a si ngle computer di rectly 
connected toa switch, or an enti re department. 

On 802.1Q VLANs, NICs do not need to be able to identify 802.10 tags in packet headers. NICs send and receive normal 
Ethernet packets. If the packet's destination lies on the same segment, communications take pi ace using normal Ethernet 
protocols. Even though this is always the case, when the destination for a packet lies on another Switch port, VLAN 
considerati ons come i nto pi ay to decide if the packet gets dropped by the Switch or del i vered. 

There are two key components to understanding 802.10 VLANs: Port VLAN ID numbers (P VI Ds) and VLAN ID numbers 
(VI Ds). Both variables are assigned to a switch port, but there are important differences between them. A user can only 
assign one PVID to each switch pat. The PVID defines which VLAN a packet belongs to when packets need to be 
forwarded to another switch port or somewhere else on the network. On the other hand, a user can define a pat as a 
member of multiple VLANs (VI Ds), allowing the segment canected to it to receive packets from many VLANs on the 
netwak. These two variables control a pat's ability to transmit and receive VLAN traffic, and the difference between 
them provides netwak segmentatia, whilestill allowing resources to be shared across maethan aeVLAN. 

802.1 Q VLAN Segmentation 

The following example is helpful in explaining how 802.10 VLAN segmentatia waks. Takea packet that is transmitted 
by a machine a Pat 1 that isa member of VLAN 2 and has the Pat VLAN ID number 2 (PVID=2). If thedestinatia lies 
a anaher pat (found through a namal fawarding table lookup), the Switch then looks to see if the rther port (Port 10) is 
a member of VLAN 2 (and can therefae receive VLAN 2 packets). If pot 10 is nrt a member of VLAN 2, then the packet 
will be dropped by the Switch and will nrt reach its destinatia. If Pat 10 is a member of VLAN 2, the packet will go 
through. This selective fawarding feature based a VLAN criteria is how VLANs segment netwaks. The key point being 
that Port 1 will aly transmit a VLAN 2, because it's Pat VLAN ID number is2 (PVID=2). 
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Sharing Resources Across 802.1 Q VLANs 

Network resources such as printers and servers however, can be shared across 802.1Q VLANs. This is achieved by setting 
up overlapping VLANs as shown in thediagram below. 

VLAN 3 
fT7 

VLAN 1 VLAN 2 

£B ii n 




Workstations 



Network 
Server 



Graphics 
Workstations 



Figure 5-4. Example of typical VLAN configuration 

In the above example, there are three different 802.1Q VLANs and each port can transmit packets on one of them 
according to their Port VLAN I D (PVI D). However, a port can receive packets on all VLANs (VI D) that it belongs to. The 
assi gn ments are as fol I ows: 



PVID 


Ports 


(Port VLAN 




ID) 




1 


Port 1 


1 


Port 2 


1 


Port 3 


2 


Port 11 


2 


Port 12 


3 


Port 7 




VI D 


Member 


(VLAN ID) 


Ports 


1 


1,2,3,7 


2 


7,11,12 


3 


1,2,3,7,11,12 



Table 5-2. VLAN assignments for Figure 5-4 



Theserver attached to Port 7 is shared by VLAN land VLAN 2 because Port 7 is a member of both VLANs (it is listed as 
a member of VI D 1 and 2). Since it can receive packets from both VLANs, all ports can successfully send packets to it. 
Ports 1, 2 and 3 send these packets on VLAN 1 (their PVID=1), and Ports 11 and 12 send these packets on VLAN 2 
(PVI D=2). The third VLAN (PVID=3) is used by the server to transmit files that had been requested on VLAN la 2 back 
to the computers. All computers that use the server will receive transmissions from it si nee they are all located on ports 
which are members of VLAN 3(VID=3). 



802.1 Q VLANs Spanning Multiple Switches 

802.1Q VLANs can span multiple switches as well as your entire network. Two considerations to keep in mind while 
building VLANs of this sort are whether the switches are IEEE 802.1Q-compliant and whether VLAN packets should be 
tagged a untagged. 

Definitions of relevant terms are as fol lows: 
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♦ Tagging The act of putting 802.1Q VLAN information into the header of a packet. Tagging ports will put the VI D 
number, priority, and other VLAN information into all packets that flow out it. If a packet has previously been tagged, 
the port will not alter the packet, thus keeping the VLAN information intact. Tagging is used to send packets from one 
802.10-compliant device to another. 

♦ Untagging The act of stripping 802.1Q VLAN information out of the packet header. U ntagging ports will take all 
VLAN information out of all packets that flow out of a port. If the packet doesn't have a VLAN tag, the port will not 
alter the packet, thus keeping the packet free of VLAN information. Untagging is used to send packets from an 802.10- 
compliant switch toa non-compliant device. 

♦ Ingress port A port on a switch where packets are flowing into the switch. If an ingress port has the Ingress Filter 
enabled, the switch will examine each packet to determine whether or not it is a VLAN member and then take one of 
two actions: if the port is not a member of a VLAN, the packet will be dropped; if the port is a member of a VLAN, then 
the packet will be forwarded. Otherwise, if the Ingress Filter is disabled, then the switch will process any packet 
received at this port in its normal fashion. 

♦ Egress port A pat on a switch where packets are flowing out of the switch, either to another switch or to an end 
station, and tagging decisions must be made. If an egress port is connected to an 802.10-compliant device, tagging 
should be enabled so the other device can take VLAN data into account when making forwarding dedsions (this allows 
VLANs to span multiple switches). If an egress connection is toa non-compliant switch or end-station, tags should be 
stripped so the (now normal Ethernet) packet can be read by the receiving device 



VLANs Over 802. 1 Q-compliant Switches 

When switches maintaining the same VLANs are 802.10-compliant, it is possible to use tagging. Tagging puts 802.10 
VLAN i nformation into each packet header, enabling other 802.10-compliant switches that receive the packet to know how 
to treat it. Upon receiving a tagged packet, an 802.10-compliant switch can use the information in the packet header to 
maintain the integrity of VLANs, carry out priority forwarding, etc. 



Data transmissions between 802.10-compliant switches takeplace as shown below. 

VLAN 1 VLAN 2 




G. EgreeB port (untag^igi 
Elnpa ag 



4. Ingres prrr (fagging) 'eats tag, 




1. 1 ig-ess pc 1 { s -laggngj 
l<na ft; prckd aiV AN 2 



1. s-aror ii vi £N 2 

haiKTiis |n:ud n 
Servers 



VLAN 1 



\/LfM2 



Figure 5-5. Data transmissions between 802.1 Q-compliant Switches 
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I n the above example, step 4 is the key element. Because the packet has 802.1Q VLAN data encoded in its header, the 
ingress port can make VLAN -based dedsions about its delivery: whether server 4& is attached to a port that is a member 
of VLAN 2 and thus, should the packet be delivered; the queuing priority to give to the packet, etc. It can also perform 
these functions fa VLAN 1 packets as well, and, in fact, for any tagged packet it receives regardless of the VLAN number. 

If the ingress pat in step 4 wae connected to a non-802.1Q-compliant device and was thus receiving untagged packets, it 
would tag its own PVI D onto the packet and use this infamatiai to make fawarding dedsias. As a result, the packets 
caning fran the nai-canpliant device would automatically be placed a the ingress ports VLAN and could only 
communicate with other pats that are members of this VLAN. 

Port-based VLANs 

Pat-based VLAN s area simplified versiat of the802.1Q VLANs described in the previous section. I n pat-based VLANs, 
all the 802.1Q settings are pre-coifigured allowing you to quickly and easily setup and maintain pat-based VLANs a 
your netwak. 

In pat-based VLANs, broadcast, multicast and unknown packets will be limited to within the VLAN. Thus, port-based 
VLANs effectively segment your netwak into broadcast domains. Furthermae, pats can aly belagtoa singleVLAN. 

Because pat-based VLANs are uncomplicated and fairly rigid in their implementatia, they are best used fa netwak 
administratas who wish to quickly and easily setup VLANs in ader to isolate limit the effect of broadcast packets a 
their netwak. 

Fa the most secure implementatia, make sure that end statias are directly canected to the switch. Attaching a hub, 
switch a aher repeater to the port causes all statias attached to the repeater to become members of the Port-based 
VLAN. 

To setup port-based VLANs, simply select one of 24 VLAN ID numbers, name the VLAN and specify which ports will be 
members. All aher ports will automatically be fabidden membership, even dynamically as a pot can belag to aly ae 
VLAN. 



Broadcast Storms 



Broadcast stams are a canma problem a today's netwaks. Basically, they casist of broadcast packets that flood 
and/a are looped a a netwak causing naiceable performance degradatia and, in extreme cases, netwak failure 
Broadcast stams can be caused by netwak loops, malfunctiaing NICs, bad cable canectias, and applicatias a 
praaols that generate broadcast traffic, among tf hers. 

In effect, broadcast stams can aiginate fran any number of sources, and ace they are started, they can be self- 
perpetuating, and can even multiply the number of broadcast packets a the netwak over time. I n the best case netwak 
utilizatia will be high and bandwidth limited until the hop counts fa all broadcast packets have expired, whereupa the 
packets will bediscarded and the netwak will return to namal. In the wast case, they will multiply, eventually using up 
all the netwak bandwidth (although netwak applicatias will usually crash lag befaethis happens), and cause a 
netwak meltdown. 

Broadcast stams have lag been a cacern fa netwak administratas with routers traditiaally being used to prevent 
their acurrence, and if that failed, to at least limit their scope. However, with theadvent of VLANs, switches are now able 
to limit broadcast domains better and cheaper than routers. Also, many switches, induding the DES-3225G series, have 
broadcast sensas and filters built into each pat to further catrol broadcast stams. 
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Segmenting Broadcast Domains 

The Switch allows you to segment broadcast domains. It does this by forwarding packets only to ports in the same 
broadcast domain or VLAN. Thus, broadcast packets will only be forwarded to ports that are members of the same 
broadcast domain or VLAN. Other parts of the network are effectively shielded. As a result, the smaller the broadcast 
domain, the less effect a broadcast storm will have. Since VLANsand broadcast domains are implemented at each switch 
port, they can be quite effective in limiting the scope of broadcast storms. 

Eliminating Broadcast Storms 

SN M P agents can be programmed to monitor the number of broadcast packets on switch ports and act on the data. When 
the number of broadcast packets on a given port rise past an assigned threshold, an action can be triggered. When enabled, 
the usual action isto block the pat to broadcast frames, which discards all broadcast frames arriving at the port from the 
attached segment. Not only does this isolate the broadcast domain, but it actually starts removing broadcast packets from 
the affected segment. When the number of broadcast packets falls to an acceptable level (below a falling threshold), the 
SNMP agent can removethe blocking condition, returning the port to its normal operational state. 

In the Switch, the default rising threshold is met when more than 500 broadcast packets per second are being detected on a 
specified port. Once the rising threshold is surpassed for a duration of more than 5 seconds, it will trigger the broadcast 
storm rising action configured by the user. The default falling threshold is met if there are less than 250 broadcast packets 
per second. It is triggered once the duration is at least 30 seconds. The actions can easily be defined by using a normal 
SNMP management program a through the console interface 
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Using the Console Interface 



Your 24-port NWay Ethernet Switch supports a console management interface that allows you to set up and control your 
Switch, either with an ordinary terminal (or terminal emulator), or over the network using the TCP/IP Tel net protocol. You 
can use this facility to perform many basic network management functions. In addition, the console program will allow you 
to set up the Switch for management using an SNMP-based network management system. This chapter describes hew to 
use the console interface to access theSwitch, change its settings, and monitor its operation. 



Setting Up A Console 



First-time configuration must be carried out through a "console," that is, either (a) a VTlOOtype serial data terminal, or 
(b) a computer running communications software set to emulate a VT100. The console must be connected tothe 
Diagnostics port. This is an RS-232 port with a 9-socket D-shell connector and DC E-type wiring. Makethe connection as 
follows: 

1. Obtain suitablecablingfatheccnnecticn. 

You can use either (a) a "null-modem" RS-232 cable or (b) an ordinary RS-232 cable and a null-modem adapter. One 
end of the cable (or cable/adapter combination) must have a 9-pin D-shell connector suitable for the Diagnostics port; 
the other end must havea connector suitablefor the console's serial communications pat. 

2. Power down the devices, attach the cable (a cable/adapter combination) to the correct pats, and restae power. 

3. Settheconsdetousethefdlowingccmmunicatia parametas fa your terminal: 

♦ 9600 baud 

♦ No parity checki ng (sormeti mes referred to as "no parity") 

♦ 8 data bits (sometimes called a "wad length" of 8 bits) 

♦ 1 stop bit (sometimes referred to as a 1-bit stop interval) 

♦ VT-100/ANSI compatible 

♦ Arrow keys enabled 



Atypical oaisdeconnectia is illustrated below: 
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D Link : '■ ' 


1 ■- n u_ 









Figure 6-1. Example of a console connection 



Connecting to the Switch Using Telnet 



Once you have set an I P address for your Switch, you can usea Telnet program (in a VT-100 compatible terminal mode) to 
access and control the Switch. Most of the screens are identical, whether accessed from the console port or from a Telnet 
interface. You can also use a Web-based browser to manage the Switch. See the next chapter, "Web-Based Network 
Management," for further information. 



Console Usage Conventions 



The console i nterface makes use of the fol I owi ng conventions: 

L Items in <anglebrackets>can betoggledonoroff using the space bar. 

2. Itemsin /"square bracketsycan bechanged by typing in a new value You can use the backspace and delete keys to 
erase characters behind and in front of the cursor. 

3. The up and down arrow keys, the left and right arrow keys, the tab key and the backspace key, can be used to move 
between selected items. 1 1 is recommended that you use the tab key and backspace key fa mavi ng around console 

4. Items in UPPERCASE are commands. Moving the selection to a command and pressing Enter will execute that 
command, eg. APPLY, etc 

Please note that the command APPLY only applies for the current session. Use Save Changes from the main menu for 
permanent changes. An asterisk '*" indicates a change has been made but wont take effect until the Switch has been 
rebooted. 



First Time Connecting To The Switch 



The Switch supports user-based security that can allow you to prevent unauthorized users from accessing the Switch or 
changing its settings. This section tells how to log onto the Switch. 

Note: The passwords used to access the Switch are case sensitive; therefore, "S" is not the same as "s." 

When you first connect to theSwitch, you will be presented with thefirst login screen (shown below). Press Ctrl4R (hold 
down the Ctrl key, press the R key, and release both keys) to call up the screen, if the initial login screen does not 
appear. Also Ctrl 4R can be used at any time to refresh the screen. 
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DES— 3 22 EG Fast Ethernet Switch Console Management 
Copyright (C) 1999-2000 D-Link Corporation 

Username : 
Password : 



******************************************************************************* 



Message Area : 

Enter case-sensitive username. 



CTRL+R = Refresh 



4 



Connected 0:07:08 \ 



>600 8-N-1 | CAPS |NUM | Capture 



Figure 6-2. Initial screen, first time connecting to the Switch 



Note: There is no initial usernameor password. Leavethe Username and Password fields blank. 

Press <Enter>or <Return>in the Username and Password fields. You will begiven access to the main menu shown below: 



D-Link DES-32 25G Standalone Switch Local Management 



Conf iquratio 



Network Monitoring 

SHMP Manager Configuration 

Update Firmware and Configuration Files 

User Accounts Management 

System Utilities 

Factory Reset 

Save Changes 

Restart System 

Logout 



******************************************************************************* 



Message Area : 



For Help, press Fl 



y 



Figure 6-3. Main menu 



The first user automatically gets Administrator privileges (SeeTablefrl). It is recommended to create at least one 
Administrator-level user fa the Switch. 
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User Accounts Management 

From the screen above, movethe cursor to the User Accounts Management menu and press <E nter>, then the Users 
Accounts Management menu appears. 

1. Choose Create/Modify User Accounts from the User Accounts Management menu and the Add/Modify 
User Accounts menu appears. 

2. Enter the new user name, assign an initial password, and then confirm the new password. Determine whether the new 
user should have Administrator or Normal User privileges. (Use the space bar to toggle between thetwooptions). 

3. PressAPPLY tolettheuser addition takeeffect. 

4. Press <Esc>to return to the previous screen or Ctrl+T to go to the root screen. 

5. To see a listing of all user accounts and access levels, press <Eso. Then choose View/Delete User Accounts. The 
View/Delete User Accounts screen appears. 

Administrator and Normal User Privileges 

There are two levels of user privileges: Administrator and Normal User. Some menu selections available to users with 
Administrator privileges may not beavailableto Normal Users. The main menus shown are the menus for the two types 
of users: 

The foil owing table summarizes Administrator and Normal User privileges: 











Privilege 


Configuration 


Yes 


Yes, view only. 


Network Monitoring 


Yes 


Yes, view only. 


Community Strings and Trap 
Stations 


Yes 


Yes, view only. 


Update Firmware and 
Configuration Files 


Yes 


No 


User Accounts Management 


Create/Modify User Accounts 


Yes 


No 


View/ Delete User Accounts 


Yes 


No 


System Utilities 


Yes 


Yes 


Factory Reset 


Yes 


No 


Restart System 


Yes 


No 



Table 6-1. Administrator and Normal User Privileges 



After establishinga User Account with Administrator-level privileges, press <Esc>twice Then choosethe Save 
Changes menu (see below). Pressing any key will return to the main menu. You are now ready to operate the Switch. 

Saving Changes 

TheDES-3225G has two levels of memory normal RAM and non-volatile or NV-RAM. Settings need to be changed in all 
screens by dicking on the Apply button. When this is done, the settings will be immediately applied to the switching 
softwarein RAM, and will immediately takeeffect. Some settings, though, require you to restart the switch before they 
will take effect. Restarting the switch will erase all settings in RAM and reload them from the NV-RAM. Thus, it is 
necessary to save all settings to the NV-RAM before restarting theswitch. 
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In order to retain any modifications made in the current session by saving them intotheNV-RAM, it is necessary to choose 
Save Changes from the main menu. The following screen will appear toindicate your new settings have been processed: 



D-Link DES-32 25G Standalone Switch Local Management 



Save all settings to NV— RAM . . . done. 
Press any key to continue. . ._ 



y 



Connected 0:08:50 



VT100 



|9600 8-N-1 |SCR0LL CAPS NUM Capture Print echo 



Figure 6-4. Save Changes screen 

After the settings have been saved to NV-RAM, they will become the default settings for the switch, and they will be used 
bytheswitch every time it is powered on, reset or rebooted. Theonly exception to this is a factory reset, which will dear all 
settings and restorethem to their initial values listed in Appendix D, which were present when the switch was purchased. 



Logging Onto The Switch Console By Registered Users 

To log in once you have created a registered user, 

1. Typein your Usernameand press <Enter>. 

2. Type i n your Password and press <E nter>. 

3. The main menu screen will bedisplayedbasedon your Administrator orNormal User access level or privilege 

Create/Modify User Accounts 

To add or change your user password: 

Choose Users Accounts Management from the main menu. The following User Accounts Management 

menu appears: 
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User Accounts Management 



View/Delete User Accounts 



******************************************************************************* 



Message Area : 



CTRL+T=Root screen 



Esc=Prev. screen 



CTRL+R = Re f res 



3 



4 



Connected 0:10:44 |VT100 |9G00 8-N-1 | SCROLL |CAPS |NUM | Capture | Print echo 



Figure 6-5. User Accounts Management menu 



L ChooseCreate/Modify User Accounts. Thefollawing screen appears: 



Add/Ho di fy User Accounts 



Add/Change User Passwords 



Usernaiae 
Old Password 
Hew Password 
Confirm New Password 
Access Level 



[CTSnow ] 

[ ******* ] 

[ ******* j 

[ ******* ] 

< Admini st r at o r > 




Figure 6-6. Add/Modify User Accounts screen 
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2. Typein your Usernameand press <Enter>. 

3. I f you are a new user, type i n the Old Password and press <E nter>. 

4. Type in the New Password you have chosen, and press <Enter>. Type in the same new password in the following 
field to verify that you have not mistyped it. 

5. Determine whether the new user should haveNormal User or Administrator privileges. 

6. Choose the APPLY command to let the password changetakeeffect. 

This method can also be used by an Ad mi ni strator-level user to change another user's password. 

View/Delete User Accounts 

Access to the console, whether using the console port a via Telnet, is controlled using a user name and password. Up to 
three of these user names can be defined. The console interface will not let you delete the current logged-in user, however, in 
order to prevent accidental ly deleti ng al I of the users with Admi ni strator pri vi lege 

Only users with theAdministrator privilege can delete users. 

To view your user password: 

Choose View/Delete User Accounts from the User Accounts Management menu. The following screen 
appears: 



View/Delete User Accounts 



User Accounts : 
User Name 
Stepanka 



Access Level 
< Administrator > 
<N/A > 
<N/A > 



Delete 

<No > 
<N/A> 
<N/A> 



******************************************************************************* 



Message Area : 




Figure 6-7. View/Delete User Accounts screen 



To delete your user password: 

L Togglethe Delete field of the user you wish to remove toYes. 
2. Press APPLY to let theuser deletion take effect. 
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Setting Up The Switch 



This section will help prepare the Switch user by describing the Configuration, Update Firmware and 
Configuration Files, Save Changes, and System Utilities menus and their respective sub-menus. 



Configuration 

Choose Configuration to access the first item on theDES-3225G main menu. The following menu appears: 



Configuration 



Configure IP Address 



Configure Switch 
Configure Ports 
Configure Slotl Hodule 
Configure SlotZ Hodule 
Configure Port Mirroring 
Configure Spanning Tree Protocol 
Configure Filtering and Forwarding Table 
Configure IG-MP Filtering 

Configure VLANs fi. MAC-based Broadcast Domains 
Configure TRUNK 
Configure Console 



******************************************* 

Message Area: 



CTRL + T = E.oot screen 



Esc=Prev. screen 



CTE.L + R = Pefres 



I Drii-.h ar.\r.r 



Connected 1:45:57 |VT100 [9600 8-N-1 | SCROLL |CAPS |NUM |Captu 

Figure 6-8. Configuration menu 



You will need to change some settings to allow you to be able to manage the Switch from an SNMP-based Network 
Management System such asSNMP via to be able to access the Switch using the Tel net protocol. Seethe next chapter 
for Web-based network management information. 



Configure IP Address 

TheSwitch needs to havean IP address assigned to it so that an In-Band network management system or Tel net client can 
find it on the network. The I P Configuration screen allows you to change the settings for the two different interfaces 
used on the Switch: the Ethernet interface used for in-band communication, and the SLI P interface used over the console 
port for out-of-band communication. 

Choose Configure IP Address to access the first item on the Configuration menu. The following screen appears: 
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Jl 

IP Configuration j 
Management Module MAC address : 00-80-C8-09-28-24 



Current Settings 

Assign IP: Manual 

IP Address: 10.5.2.241 

Subnet Mask: 255. 0.0.0 

Default Gateway: 10 . 254 . Z54 . Z54 



Restart Settings 

Assign IP: < B^tgE g^|> 

IP Address: [10.5.2.241 ] 

Subnet Mask: [255.0.0.0 ] 

Default Gateway: [10.254.254.254 ] 
APPLY 

**************************************************************** 
Message Area: 



Enables/disables the EQOTP on startup. 




Figure 6-9. IP Configuration screen 



The fields listed under the Current Settings heading are these that are currently being used by the Switch. Those fields 
listed under Restart Settings will be used after the Switch has been Reset. Fields that can beset include: 

♦ Assign IP Determines whether theSwitch should get its IP Address settings from theuser (Manual), a BOOTP 
server, or a DHCP server. If Manual is chosen, the Switch will use the IP Address, Subnet Mask and Default 
Gateway settings defined in this screen upon being rebooted. If BOOTP is chosen, the Switch will send out a 
BOOTP broadcast request when it is powered up. The BOOTP protocol allows I P addresses, network masks, and 
default gateways to be assigned by a central BOOTP server. If this option is set, the Switch will first look for a 
BOOTP server to provide it with this information before using the supplied settings. If DHCP is chosen, a Dynamic 
Host Configuration Protocol request will be sent when theSwitch is powered up. 

♦ IP Address Determines the IP address used by the Switch for receiving SN MP and Telnet communications. These 
fields should beef the form xxx.xxx.xxx.xxx, where each xxx is a number (represented in decimal) between 0 and 
255. This address should be a unique address on a network assigned to you by the central I nternet authorities. The 
same IP address is shared by both the SLIP and Ethernet network interfaces. 

♦ Subnet Mask Bitmask that determines the extent of the subnet that the Switch is on. Should be of the form 
xxx.xxx.xxx.xxx, whereeach xxx is a number (represented in dedrmal) between Oand 255. If nosubnetting is being 
done, thevalueshould be 255.0.0.0 for a Class A network, 255.255.0.0 for a Class B network, and 255.255.255.0 for 
a Class C network. 



♦ Default Gateway IP address that determines where frames with a destination outside the current subnet 
should be sent. This is usually the address of a router or a host acting as an IP gateway. If your network is not part 
of an internetwork, or you do not want the Switch to be accessible outside your local network, you can leave this field 
unchanged. 
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Configure Console 

You can use the Console Options screen to choose whether to use the Switch's RS-232C serial port for console 
management or for out-of-band TCP/IP communications using SLIP, andtosetthebit rate used for SLIP communications. 

Choose Configure Console to access the last item on theConfiguration menu. Thefdlowing screen appears: 



Console Options 



Out-of-band Settings Console Settings 

Baud Rate: 38400 Baud Rate: 9600 

Character Size: 8 Character Size: 8 

Stop Bit: 1 Stop Bit: 1 

Current Settings 

Console Timeout: Never 
Serial Port: Console 

Settings on Restart 

Console Timeout: " :: 3S£3B :> 
Serial Port: <Console> 



APPLY 

******************************************************************************* 
Message Area: 



CTPL+T=Poot screen CTPL+S=Apply Settings Esc=Prev. screen CTPL+P = Pefres 




qenn □ m i 



Figure 6-10. Console Options screen 



The foil owing fields can beset: 
Settings on Restart: 

♦ Console Timeout This setting for the restart of the console is 2 mins, 5 mins, 10 mins, 15 mins, a Never. 

♦ Serial Port Determines whether the serial port should be used for out-of-band (SLIP) management orfor console 
management, starting from the next time the Switch is restarted. I n this field, you can toggle between SLI P or 
C on sol e port type setti ngs . 

♦ Baud Rate Determines the serial port bit rate that will be used the next time the Switch is restarted. Applies 
only when the serial port is being used for out-of-band (SLIP) management; it does not apply when the pat is used 
for the console port. Avail able speeds are 2400, 9600, 19,200 and 38,400 bits per second. The default setting in this 
Switch version is 9600. 



The top of the screen displays the current settings for Console Timeout and Serial Port as well as the Baud 
Rate, Character Size, and Stop Bit for Out of Band and Console setti ngs, respectively. 
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Configure Switch 



The Switch Configuration screen shows various pieces of information about your Switch, and allows you to set the 
System Name, System Location, and System Contact. These settings can be retrieved from the Switch using 
SNMP requests, all owing these settings to be used for network management purposes. 

Choose Configure Switch to access the second item on the Configuration menu. Thefdlowing screen appears: 



=rr^ 



Switch Configuration 



D-Link DES-3225G Standalone Switch 

100EASE-SC Hodule present (1 port) 

1000BASE-SX Gigabit Hodule present (1 port) 

00-20-43-63-02-35 

2. 00-B26 

2. 00-E32 

01 



Device Type: 
Slotl Hodule: 
Slot2 Hodule: 
HAC Address: 
Boot PROH Version: 
Firmware Version: 
Hardware Revision: 

System Name: 
System Location: 
System Contact: 



ADVANCED SETTINGS 



******************************************************************************* 



[DES-322SG 

[No. S, Lihsing Road VII, Science Park 
[CT Snow, 563-6666, ext. 6837 



] 



Hessage Area: 



CTRL+T=Root screen CTRL+S=Apply Settings Esc=Prev. screen CTRL+R = Refres 



| 



3 



VT100 1 9600 8-N-1 [SCROLL |CAPS |NUM | Capture | Print echo 

Figure 6-11. Switch Configuration screen 



1 



Connected 1:26:22 



The fields you can set are: 

♦ System Name Corresponds to the SNMP MIB II variable system. sysName, and is used to give a name to 
the Switch for administrative purposes. The Switch's fully qualified domain name is often used, provided a name 
has been assigned. 

♦ System Location Corresponds to the SN M P MIB II variable system. sysLocat ion, and is used to 
indicate the physical location of theSwitch for administrative purposes. 

♦ System Contact Corresponds to the SNMP MIB II variable sysContact, and is used to give the name and 
contact i nformation for the person responsi blefor admi nistering the Switch. 



Advanced Settings 

The Configure Advanced Switch Features screen allows you to set an expiration time for MAC address entries and 
enableor disableauto-partitioning on all ports. Select ADVANCED SETTINGS on the Switch Configuration screen 
to access the Configure Advanced Switch Features screen (see below). Press APPLY once the desired changes have 
been made. 
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-■Ul 



Configure Advanced Switch Features 



Port Auto-Partition Capability on All Ports : <Enabled > 
Head Of Line (HOL) Blocking Prevention: -^Enabled > 



******************************************************************* 
Message Area: 



CTPL+T=Poot screen CTRL+S=Apply Settings Esc=Prev. 



CTRL+R = Refres 







VT100 






I i — ■ A I - ii~ 









Figure 6-12. Configure Advanced Switch Features screen 



The fields you can set are: 

♦ Port Auto-Partition Capability on All Ports When thisfunction is enabled, if too many consecutive 
collisions occur on an individual port, the port will be blocked off until a good packet is seen on the wire. If a port is 
partitioned, the Switch can only transmit data, not receive it. 

♦ Head Of Line (HOL) Blocking Prevention Enables or disables Head-Of-Line Blocking Prevention. Head-of 
Line blocking occurs when a packet originating on Pat 1, for instance, needstobeforwardedtoPorts2and 3. If Port 2 
is occupied (causing the packet to be held in memory until the port is free), the packet destined for Port 3 will also be 
delayed, even though the port may be free. Cumulatively, these del ays can havea noticeable effect on overall network 
performance. EnablingHOL Blocking Prevention prevents Head-of-Line blocking from occurring, meaning that the 
packet desti ned for Port 3 gets del i vered i mmediately. 



Configure Ports 

The pat configuratia screen allows you to change the pat state in the case when you would like to partition a port due to 
excessive collision, or for observatia, device repair, a security reasas. Great caution, however, must be observed when 
partitioning a pat; you should make sure that the partitioned port is nrt being used as the pat to control a nronita the 
caditia of other devices. 
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Port Configuration 



Port (1-22, all) : [1 ] 



Note : 



State :<Enabled > 

Speed/Duplex : <Auto > 
Flow Ctrl : <0n > 

Priority : <Normal> 

Port Lock :<Disabled> 
Broadcast Storm 

Rising Action : <Do Nothing > 

Threshold: [£00 ] (Pkts/sec) 

Falling Action: <Do Nothing > 

Threshold: [Z£0 ] (Pkts/sec) 
STP Port State : Forwarding 
Status : lOH/Half/FC-Of f 



Rising action threshold must be 
larger than Falling action 
threshold. 

The range of threshold must be 
1 - 1488000. 



********************************************************************* 



Message Area: 



CTRL+T=Root screen CTRL+S=Apply Settings Esc=Prev. screen CTRL+R = Refres 



5:37:31 



Figure 6-13. Port Configuration screen 



I terns i n the above wi ndow are defi ned as fol I ows: 



♦ Port Specifies the port (l-22,all) that will be configured. When all is chosen, the settings you configure will be 
applied to all UTP ports. 

♦ State Enablesordisablestheport.Thisamountstotumingtheporton oroff. 

♦ Speed/Duplex Selects the desired Speed and Duplex fat the port. Possible settings include: Auto, 100M/ Full, 
100M/ Half, 10M/ Full, or 10M/ Half. Choosing Auto enables NWay auto-configuration on the port. 

♦ Flow Control Toggles flow control On or Off. Flow control can only be used with other IEEE 802.3x-compliant 
devices and in a full-duplex connection. It is useful during periods of heavy network activity when the Switch's 
buffers can receive too much traffic and fill up faster than the Switch can forward the informati on. In such cases, the 
Switch will intervene and tell the transmitting device to pause to allow the informati on in the port buffer to be sent. 
When Auto-Negotiation is enabled in the Speed/Duplex field above, flow control will only be enabled if the 
connected device can Auto-negotiate flow control. Confirm that Flow Control is in face by checking the Status field. 

♦ Priority Selects Normal, High a Low. The Switch has two packet queues where incoming packets wait to be 
processed fa fawarding; a high priaityand low priaity queue. The high priaity queue should aly be used fa data 
in which latency can have adverse affects ar\ the functia of an application, such as video a audio data, whae 
latency can produce di stated sounds and images. Packets in thelow priaity queue will na bepraessed unless the 
High priaity queue is empty. Setting the pat priaitytohigh will deliver all packets arriving at the pat to the high 
priaity queue, a low setting will send them all to the low priaity queue. The Normal settings causes the pat to 
examine the packet fa an I EEE 802.1p/Q priaity tag If no tag exists, the packet will be sent to the low priaity 
queue. If the priaity tag field in the packet header catains a value of 0-3, the packet will be placed in the low 
priaity queue; a value of 4-7 causes the packet to be pi aced i n the high priaity queue. 
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♦ Port Lock When locked, automatic learning for all stations connected to this port will stop and entries in the 
Forwarding Table for all devices residing on this pat will age out. The only traffic this port will allow is traffic from 
machines whose MAC address is manually entered in the Static F awarding Table. 

♦ Broadcast Storm Rising Action This setting will be activated when Broadcast Storm Rising Threshold 
(below) is met. When triggered, the pat can be configured to Do Nothing, Blocking or Blocking-Trap. The Do 
Nothing setting causes the switch to operate namally, in other wads, ignaethe broadcast stam condition. The 
Blocking setting causes the pat to drop all broadcast frames, thus isolating the broadcast storm. Blocking-Trap 
perfams the same action as Blocking, except it also sends a trap to the designated Trap Redpient infaming them 
of the situation. Fa mae infamatiai ai broadcast stams, please refer to the Switch Management Concepts 
section of this manual. 

♦ Broadcast Storm Rising Threshold This setting defines a ceiling fa the number of broadcast packets per 
secad a this pat. Once met, the Broadcast Storm Rising Action (above) will be triggered. The assigned number 
should be high enough to allow namal broadcast packets (which comprise significant traffic) to be let through, while 
bei ng low enough so that broadcast stams can be detected early. 

♦ Broadcast Storm Falling Action This setting will be activated when the Broadcast Storm Rising 
Threshold and then the Broadcast Storm Falling Threshold (below) is met. This setting can becafigured to 
Do Nothing, Forwarding a Forwarding-Trap. The Do Nothing setting causes the switch to operate namally, 
in aher wads, ignaethesituatia. If the pot had met the Broadcast Storm Rising Action criteria and started 
Blocking broadcast packets, it will catinue doing so. The Forwarding setting causes the port to begin fawarding 
broadcast frames, thus removing the Blocking state imposed by the Broadcast Storm Rising Action. 
Forwarding-Trap perfams the same actia as Forwarding, except it also sends a trap to the designated Trap 
Redpient infaming them of thesituatia. 

♦ Broadcast Storm Falling Threshold This setting defines the number of broadcast packets per second a this 
port which will trigger the Broadcast Storm Falling Action (above). This threshold will aly trigger an actia if 
the Broadcast Storm Rising Threshold has first been reached. The assigned number should be high enough to 
allow namal broadcast packets (which comprise significant traffic) to be let through as early as possible, while 
being low enough so that broadcast stams are completely eliminated. 

Press APPLY to let the changes take effect. If you wish these changes to be the default fa the switch, return to the main 
menu and choose Save Changes. 

STP Port State (whether the Spanning Tree Praaol is enabled a disabled a this pat) and Status reflect the current 
conditias of the pat. They are readonly fields and canna be changed. 

Configure Slotl Module 

This screen allows you to change the port state of the module in sltf 1 in the case when you would like to partitia a pat 
due to excessive cd I i si a, afa observatia, device repair, a security reasas. Great cautia, hcwever, must be observed 
when disabling a pat, si nee all data passing through the port will be discarded by the Switch. 

Tochangetheconfiguratia of theSlrtl moduleshown below: 



40 



Using the Console Interface 



24-port NWay Ethernet Switch User's Guide 



Slotl-Port Configuration 



Slotl Module: 



100BASE-TX Hodule present (2 ports) 



Port :< S1P1 > Note: 1. 

State ^Enabled > 

Speed/Duplex : <Auto > 

Flow Ctrl : <0n > 2 . 

Priority : <Normal> 

Port Lock :<Disabled> 

Broadcast Storm 

Rising Action : <Do Nothing > 

Threshold: [500 ] (Pkts/sec) 

Falling Action: <Do Nothing > 

Threshold: [Z50 ] (Pkts/sec) 
STP Port State : Forwarding 
Status : - 



Rising action threshold must be 
larger than Falling action 
threshold. 

The range of threshold must be 
1 - 14SS000. 



*±±±±±±±**±±±±±±**±±±±±±**±±±±±±±**±±±±±±**±±±±±±**±±±±±±±**±±±±±±**±±±±±±**±±± 



Message Area: 



CTRL + T = Root screen CTRL + S=Apply Settings Esc = Prev. screen CTE.L + R = Pefres 




Figure 6-14. Slotl -Port Configuration screen 



♦ Port Field specifies either S1P1, the Pat lx port a SIP 2, the Port 2x port on the module. For single-port 
modules, only SIP 1 will be available. 

♦ State E nables or disables this port. 

♦ Speed/Duplex Selects the desired Speed and Duplex fat the pat. Possible settings include: Auto, 100M/ Full, 
100M/ Half, 10M/ Full,alOM/ Half. Choosing Auto enables NWay auto-configuration on the pat. 

♦ Flow Control Enables a disables IEEE 802.1x full-duplex (aly) flow catrol on this port. See Flow Control in 
theConfigure Ports section above fa a maedetailedexplanatia. 

♦ Priority Selects Normal, High or Low. See Priority in the Configure Ports sectia above fa a more detailed 
explanatia. 

♦ Port Lock When locked, automatic learning fa all statias coinected to this pat will stop and entries in the 
F awarding Table fa all devices residing a this pat will age out. The aly traffic this pat will allow is traffic from 
machines whose MAC address is manually entered in the Static F awarding Table. 

♦ Broadcast Storm Rising Action Selects an actia - Do Nothing, Blaking, Blaking-Trap - fa the pat 
when theBroadcast Stam Rising Threshold (below) caditia is met. See Broadcast Storm Rising Action in the 
Configure Ports sectia of this manual fa a maedetailedexplanatia. 

♦ Broadcast Storm Rising Threshold This setting defines a ceiling fa the number of broadcast packets per 
secad a this pat. See Broadcast Storm Rising Threshold in theConfigure Ports sectia of this manual fa a 
mae detai I ed expl anati a. 
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♦ Broadcast Storm Falling Action This setting will be activated when the Broadcast Storm Rising 
Threshold and then the Broadcast Storm Falling Threshold (below) is met. This setting can be configured to 
Do Nothing, Forwarding or Forwarding-Trap. See Broadcast Storm Falling Action in the Configure Ports 
section of this manual for a moredetailed explanation. 

♦ Broadcast Storm Falling Threshold This setting defines the number of broadcast packets per second on this 
port which will trigger the Broadcast Storm Falling Action (above). See Broadcast Storm Falling Threshold 
in the Configure Ports section of this manual for a moredetailed explanation. 

Press APPLY to have the changes take effect. 

STP Port Stateand Status reflect the current conditions of the port. They are read-only fields and cannot be changed. 



Configure Slot2 Module 

This screen allows you to change the port state of an optional Gigabit Ethernet module in slot 2. This is useful in the case 
when you would like to partition a port due to excessive collision, or for observation, device repair, or security reasons. 
Great caution, however, must be observed when disabling a port, si nee all data passing through the port will be discarded 
by the Switch. 

TheConfigure Slot2 Modulescreen appears as follows: 



SlotZ-Port Configuration 



Optional Module: 1000EASE-LX Module (1 port) present 



Note: 

State :<Enabled > 

Speed/Duplex : <1 0 0 OM/ Ful 1 > 
Flow Ctrl :<0n > 

Priority ^Normals- 
Port Lock :<Disabled> 
Broadcast Storm 

Rising Action : <Do Nothing > 

Threshold: [£00 ] (Pkts/sec) 

Falling Action: <Do Nothing > 

Threshold: [Z50 ] (Pkts/sec) 
STP Port State : Forwarding 
Status : - 



Rising action threshold must be 
larger than Falling action 
threshold. 

The range of threshold must be 
1 - 14SS000. 



**************************************************** 



Message Area: 



CTRL+T=Poot screen CTRL+S=Apply Settings 



!sc=Prev. screen CTRL+R = Refres 



39:21 




| CAPS |NUM | Capture | Print echo 



Figure 6-15. Slot2-Port Configuration screen 



♦ State Enables or disables this port. 

♦ Speed/Duplex If either a 1000BASE-SX or 1000BASE-LX module is used, this field will offer two choices: 
1000M/ Full or Auto. If a 1000BASE-T module is used, this field will offer the following choices: 1000M/ Full, 
lOOM/Full, lOOM/Half, and Auto. Please note that DES-3251G/GL version A2 supports lOOOM/Full only. 
Version A3 supports 1000M/ Full and Auto. 
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♦ FlowControl Enables or disables IEEE 802.1x full-duplex (only) flow control on this port. See Flow Control in 
theConfigure Ports section above for a more detailed explanation. 

♦ Priority Selects Normal, High or Low. See Priority in the Configure Ports section above for a more detailed 
explanation. 

♦ Port Lock When locked, automatic learning for all stations connected to this port will stop and entries in the 
Forwarding Table for all devices residing on this pat will age out. The only traffic this port will allow istrafficfrom 
machines whose MAC address is manually entered in the Static F awarding Table. 

♦ Broadcast Storm Rising Action Selects an action - Do Nothing, Blocking, Blocking-Trap - fa the pat 
when theBroadcast Stam Rising Threshold (below) oaidition is met. See Broadcast Storm Rising Action in the 
Configure Ports section of this manual fa a maedetailed explanation 

♦ Broadcast Storm Rising Threshold This setting defines a ceiling fa the number of broadcast packets per 
second a this port. See Broadcast Storm Rising Threshold in theConfigure Ports section of this manual fa a 
maedetailed explanatia. 

♦ Broadcast Storm Falling Action This setting will Deactivated when the Broadcast Storm Rising 
Threshold and then the Broadcast Storm Falling Threshold (below) is met. This setting can becafigured to 
Do Nothing, Forwarding or Forwarding-Trap. See Broadcast Storm Falling Action in the Configure Ports 
sectia of this manual fa a maedetailed explanatia. 

♦ Broadcast Storm Falling Threshold This setting defines the number of broadcast packets per secadathis 
port which will trigger the Broadcast Storm Falling Action (above). See Broadcast Storm Falling Threshold 
in theConfigure Ports sectia of this manual fa a maedetailed explanatia. 

Press APPLY to have the changes take effect. 

STP Port Stateand Status reflect the current caditias of the pat. They are readonly fields and canntf be changed. 
Configure Port Mirroring 

The Switch allows you to copy frames transmitted and received a a pat and redirect the copies to anaher pat. You can 
attach a maitaing device to the mirraed pat, such as a sniffer a an RMON probe, to view details about the packets 
passing through thefirst pat. This is useful fa netwak maitaing and troubleshooting purposes. 

Choose Configure Port Mirroring a the Configuration menu to access the following screen: 
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Configure Port Mirroring 



This feature allows you to mirror a port to another port for network 
I monitoring and troubleshooting purposes. 



The target port must always be a regular non-trunked port. 



Source Port: < Port 1 > 
Target Port: < Port 2 > 
Status : <Disabled> 



****************************************************************************** 
Hessage Area: 



CTPL+T=Poot screen CTPL+S=Apply Settings Esc=Prev. screen CTPL+P = Refres 




Figure 6-16. Configure Port Mirroring screen 



Toconfigurea mirror port, select the port from where you want to copy frames in the Source Port field. Then select the pat 
which receives the copies from the source port in the Target Port field. The target port is where you will connect a 
monitoring/troubleshooting device such as a sniffer or an RMON probe 

Note: You cannot mirror a fast port onto a slower port. For example, if you try to mirror the traffic from a 100 M bps port 
onto a 10 M bps port, this can cause throughput problems. The port you are copying frames from should always 
support an equal or lower speed than the port to which you are sending the copies. Also, the target port cannot bea 
member of a trunk group. 



Configure Spanning Tree Protocol 

The Spanning Tree Algorithm Parameters can be used for creating alternative paths in your network. The Protocol 
Parameters allow you to change the behind the scene parameters of the Spanning Tree Algorithm at the bridge level. The 
parameters for this section have been fully explained in Chapter 5'sSwitch Management Concepts, see STA Operation 
Levels: On the Bridge level, and User-Changeable Parameters. It is recommended that you read these sections, as well 
as the introductory section in the same chapter entitled Spanning Tree Algorithm before changing any of the 
parameters. 

STP Parameter Settings 

To change the Protocol Parameters: 

L Choose Configure Spanning Tree Protocol from the Configuration menu. The following Configure 
Spanning Tree Protocol menu will be displayed: 
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Configure Spanning Tree Protocol 



STP Port Contorl 



******************************************************************************* 



Message Area : 

Set Spanning Tree Protocol parameters. 



CTRL+T=Root screen 



Esc=Prev . screen 



CTRL+R = Refres 



Connected 1:58:06 |VT100 |9G00 8-N-1 | SCROLL |CAPS |NUM | Capture | Print ech 



Q 



Figure 6-17. Configure Spanning Tree Protocol menu 

2. ChooseSTP Parameter Settingtoaccessthefollowingscreen: 



STP Parameters Setting 



Spanning Tree Protocol 

Time Since Topology Change (sec): 0 sees 

Topology Change Count : 0 

Designated Root : 00-00-00-00-00-00 

Root Cost : 0 

Root Port : 0 

HaK Age (sec) : 0 

Forward Delay (sec) : 0 

Hold Time (sec) : 0 

Root Priority : 0 



HaK Age (6-40 sec) 
Hello Time (1-10 sec) 
Forward Delay(4-30 sec) 
Bridge Prior ity ( 0-65535 ) 



: [20 
: [2 
: [IS 



: [32768] 
APPLY 

**************************************************************************** 
Message Area: 



CTRL+T=Root screen CTRL+S=Apply Settings Esc=Prev. screen CTRL+R = Refres 



:05:16 



VT100 



9600 8-N-1 



SCROLL CAPS NUM Capture Print echo 



A. 



Figure 6-18. STP Parameters Setting screen 
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The information on thescreen is described as follows: 

♦ Spanning Tree Protocol Enables or disablestheSpanningTreeProtocol. 

♦ Time Since Topology Changes (sec) Read-only object displaysthelasttimechanges weremadetothe 
network topology. These changes usually occur when backup paths are activated due to pri mary path failures. 

♦ Topology ChangeCount Read-onlyobjectdisplaysthenumberoftimes(sincethecurrentmanagennent 
session with the device was started) changes were made to the network topology. Changes usually occur on the 
network when backup paths are activated. 

♦ Designated Root Read-onlyobjectdisplaystheMAC (Ethernet) address of the bridge/switch onthenetwork 
that has been chosen astheSTP root. 

♦ Root Cost Read-only object displays thecost for the path between theswitch and the root bridge. If theswitch 
is the root bridge then the root cost is zero. 

♦ Root port Read-only object identifies the port (on the bridge) that offers the least path cost from the bridge to 
the root bridge. In the event of a network loop, data packets will pass through the root port. 

♦ Max Age (sec) Read-only object indicates the maximum age of STP information learned from the network (on 
any port) before it is discarded. 

♦ Forward Delay (sec) Read-onlyobjectindicateshowfastanypatonthebridgecanchangeitsspanning 
state when moving towards the forwarding state. The value determines how long the port stays in each of the 
listening and learning states, which precede the forwarding state. 

♦ Hold Time (sec) Read-only object displays the time interval during which no more than two configuration BPDUs 
shall be transmitted by the bridge. 

♦ Root Priority Read-onlyobjectdisplaysthepriority number oftheroot bridge of the Spanning Tree. The 
value is used in conjunction with the bridge MAC address to set the bridge I D, which in turn is used when 
determining the root bridge of a multi-bridged network. The root bridgeis responsible for processing data packets 
when network loops occur. Thesmal ler the number set, the higher the bridge priority is. The higher the bridge 
priority, the more chance the bridge has of becomi ng the root bridge A bridge priority ranges from 0 to 65535, 

wi th 0 bei ng the h i ghest priority. 

♦ Max Age (6-40 sec) MaximumAgeisa read-write object that can be set from 6 to 40 seconds. At the end of the 
Maximum Age, if a BPDU has still not been received from the Root ridge, your Switch will start sending its own 
BPDU toall other switches for permission to become the Root Bridge. If it turns out that your Switch has the 
lowest Bridge Identifier, it will becometheRoot Bridge. 

♦ Hello Time (1-10 sec) HelloTimeisa read-write object that can beset from 1 to 10 seconds. This is the 
interval between two transmissions of BPDU packets sent by the Root Bridgetotell all other switches that it is 
indeed the Root Bridge. If you set a HelloTime for your Switch, and it is not the Root Bridge, theset HelloTime 
will be used if and when your Switch becomes the Root Bridge. 

♦ Forward Delay (4-30 sec) TheForward Delay isa read-write object that can be set from 4 to 30 seconds. 
Thisisthetimeany port on the S wi ten spends i n the I i sten i ng state while movi ng from t he bl ocki ng state to the 
forwarding state 

♦ Bridge Priority (0-65535) A Bridge Priority isa read-write object that can be set from 0 to 65535. This is the 
priority number of the bridge. The value is used i n conjunction with the bridge MAC address to set the bridge I D, 
which in turn is used when determining the root bridge of a multi bridged network. The root bridgeis responsible 
for processing data packets when network loops occur. Thesmal ler the number set, thehigher the bridge priority 
is. The higher the bridge priority, the more chance the bridge has of becoming the root bridge Zero is the highest 
priority. 
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STP Port Control 

Tochangethe parameters on individual ports: 

1. ChooseConfigure Spanning Tree Protocol from the Configuration menu. 

2. Choose STP Port Control from the Configure Spanning Tree Protocol menu. The following screen 
appears: 
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Message Area : 

Activates Spanning Tree Protocol on this port. 
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Figure 6-19. Spanning Tree Protocol Custom Settings screen 



Items in the above window are described as follows: 



♦ STP State EnablesadisablestheSpanningTreeProtocd on a particular port. 

♦ C ost This is a read-only object. Both 10M bps and 100M bps segments have an assigned Path Cost of 19, based 
on theSTA specifications. 

♦ Priority Port Priority is a read-write object that can beset from 0 to 255. This is the priority number of the 
port. The lower the port priority, the morechancethe bridge has of becoming the root port. Zero is the highest 
priority. 



Configure Filtering and Forwarding Table 

When a packet hits the Switch, it looks in the filtering and forwarding table to decide what to do with the packet; either to 
filter it off the network, or to forward it through the port on which its destination lies. 

Dynamic F i Iteri ng and Static F i I teri ng are among the two i mportant features of the C ustom F i Iter i ng Table They are 
defined here briefly as follows. Dynamic Filtering is defined when a dynamic entry is created by the Learning Process as 
a result of observation of network traffic in the Filtering Database. Static Filtering is defined as static entries that may 
be added and removed from the Filtering Database by the user. They are not automatically removed by any timeout 
mechanism. 
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TheConfigure Filtering and Forwarding Table screen allows you to allows you to stop or start address learning, 
change the way the Switch treats MAC address table entries, and select an age-out time of the MAC address in the 
selected address table. This screen also permits you to access three additional configuration screens from the menu at the 
bottom of the screen . 

Choose Configure Filtering and Forwarding TablefromtheConfiguration menu to access the following screen: 



Configure Filtering and Forwarding Table 



Lock Address Table (Stops Aut o - L e arnincr 1 : <ij^J> 

Address Table Lookup Mode: <Level 7> 

MAC Address Aging Time: [300 ] (sec) APPLY 



Configure Static Forwarding Table 
Configure MAC Address Filtering 
Configure Static Multicast Forwarding 



(*) Denotes changes will be applied after rebooting the switch. 



******************************************************************************* 

Message Area: 

Stop address learning? 



CTPL+T=Eoot 



CTEL+S=Apply Settings Esc=Prev. screen CTEL+P = Pefres 









19600 8-N-1 


| SCROLL 






Figure 6-20. Configure Filtering and Forwarding Table screen 



The following fields at thetop of the screen can beset: 

♦ Lock Address Table (Stops Auto-Learning) Mostly used for security purposes, when the forwarding table is 
locked the Switch will no longer learn the MAC addresses for new hosts. If your network configuration doesn't change, 
locking the forwarding table helps keep intruders off your network since any packet coming from an unknown source 
address will be dropped by the Switch. 

♦ Address Table Lookup Mode This setting allows the user to tailor the MAC address look up procedure. Choices 
are Level 0, Level X Level 2, Level 3 Level 4 Level 5 Level, 6, Level 7. The higher the level, the more MAC 
addresses can be learned by the Switch. However, a side effect is that throughput will be degraded the higher the level 
you select. Level 1 isthedefault. 

♦ MAC Address Aging Enter the desired MAC address age-out time in this field (10 to 1000000 seconds). 

Please refer to the Packet Forwarding section of the "Switch Management Concepts" chapter of this manual for more 
detailed information. 



Configure Static Forwarding Table 

The Static Forwarding Table displays a list of manually defined static MAC address entries. 
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Toaccessthe Custom Forwarding Table, choose Configure Filtering and Forwarding Table from the 
Configuration menu. Then select Configure Permanent Address Table Entry from the bottom of the 
Configure Filtering and Forwarding table screen. Thefdlowing screen appears: 



Static Forwarding Table 



Static Forwarding Entries: 

Action: <^^^|> MAC Address: [000000000000] Port:<l 
Entries: 0 APPLY 

Destination MAC Address Destination Port VLAM 



> VLAN: [1 
Status 



****************************************************************************** 

Message Area: 

Add or Remove an entry. 

Esc = Previous screen CTRL+R = Refresh H - Next Page P - Previous Page 



4 



Connected 0:24:09 |VT100 1 9600 8-N-1 [SCROLL |CAPS |NUM | Capture | Print echo 



Figure 6-21. Static Forwarding Table screen 



By mapping a MAC address to a destination port, the Switch can permanently forward traffic for a spedfied device 
through a specific port, even after long periods of network inactivity or during times of network congestion. 

Thefdlowing fields at thetop of the screen can beset: 

♦ Action ChoosetoAdd or Removean entry from the table. 

♦ MAC Address A total of ten destination addresses per page will be seen. The Switch can hdd up to 96 entries. 
ThisistheMAC address of thedevice that you arecreatinga permanent forwarding address for. 

♦ Port Heading a port number will be displayed for each caresponding destination address. TheSwitch will always 
forward traffictothe specified devicethrough this port. 

♦ VLAN This setting only appears when Pat-based or IEEE 802.1Q VLAN s are active and defines the VLAN ID 
number in the packet. Makesurethe port can accept packets on this VLAN by assigning the port thisVID number. 

Entries, as well as Destination MAC Address, Destination Port, VLAN, and Status, all in the lower part 
ofthescreen, are read-only. The Status of the static forwarding table entry can beln useor Not apply. Not apply 
means that there is a static filter for the same MAC address. Static filters always take precedence ewer static 
forwarding entries. The switch will automatically upgrade theStatus to "in use" once the static filter is removed. 
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Configure MAC Address Filtering 

TheStatic Filtering Table contains filtering information configured into the Switch by (local a network) management 
specifying destination addresses which are not allowed to be forwarded. The Switch will check both the destination and 
source MAC addresses on al I packets. 

To access the Static Filtering Table select Configure Filtering and Forwarding Table from the 
Configuration menu. Then select Configure MAC Address Filtering from the bottom of the Configure 
F i Iteri ng and F orwardi ng Tablescreen. Thefol lowi ng screen appears: 




Static Filtering Table 



Action: -Q^^B> MAC Address: 
Entries: 0 APPLY 
Filtering Address List 



[000000000000] 



VLAH: [1 ] 
VLAH 



******************************************************************************* 



Message Area: 
Add or Remove entry. 

Esc = Previous screen CTPL+P = Refresh 




N - Next Page P - Previous Page 



51:59 
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9600 8-N-1 SCROLL CAPS NUM Capture 



Figure 6-22. Static Filtering Table screen 



To make a change to the Static Filtering Table, choose Add a Remove in the Action field. Then enter the MAC 
Address and VLAN (if Port-based or I E E E 802.1Q VL AN s are enabled) and press APPLY. 



Configure IGMP Filtering 

Internet Group Management Protocol (IGMP) allows multicasting on your network. When IP Multicast Filtering is 
Enabled, the Switch can intelligently forward (rather than broadcasting) IGMP queries and reports sent between devices 
connected to the Switch and an I GMP-enabled device hosting IGMP on your network. When enabled fa IGMP snooping, the 
Switch can open or close a port to a specific Multicast group member based on IGMP messages sent from the device to the 
IGMP host a vice versa. 

Basically, in these submenus you define whether the Switch can intelligently forward IGMP packets, and you must also 
define which 802.1Q VLAN s (if present) can send and receive IGMP and Multicast packets. 

Toaccessthe IGMP Configuration screen, choose Configure IGMP Filtering from the Configuration menu. 
The follow screen appears: 
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IG-MP Configuration 



Device Settings: 



IP Hulticast Filtering Age-out Timer ( 30-9999 ) : [300 ] (sec) 

IP Hulticast Filtering (IG-MP Snooping) : <Disabled> 



VLAN Settings: 



Configure 80Z.1Q IGHP 



********************************************************************* 



Message Area: 



CTPL+T=Root screen CTRL+S=Apply Settings Esc=Prev. screen CTPL+R = Pefres 



1:12:53 



Figure 6-23. IGMP Configuration screen 

I terns i n the above wi ndow are def i ned as fol I ows: 

♦ IP Multicast Filtering Age-out Timer(30-9999) When this timer expires and the Switch has not observed 
(snooped) any IGMP query packets asking whether any stations belong to any Multicast groups, the Switch itself will 
send out queries and become the IGMP host on your network. 

♦ IP Multicast Filtering (IGMP Snooping) This enables or disables the Switch to intelligently forward IGMP 
and Multicast packets instead of broadcasting (flooding) them on all ports. This setting also enables IGMP Snooping, 
which enables the Switch to read IGMP packets being forwarded through the Switch in order to obtain forwarding 
information from them (learn which pats contain Multicast members). 



If IEEE 802.1Q VLANs is selected on the VLANs & MAC -based Broadcast Domains Configuration screen, 
Configure 802.1Q IGMP will appear at the bottom of the IGMP Configuration screen. This screen allows IGMP to 
operatein conjunction with IEEE 802.1Q VLANs. Thescreen isshcwn below: 
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IEEE 802. 1Q IG-MP Configuration 



del/Remove IG-HP Control Table 



Configure IG-HP Control Table 



****************************************************************************** 
Message Area: 



CTPL+T=Poot screen 



Esc=Prev. screen 



CTPL+P = Pefres 



i 



Figure 6-24. IEEE 802.1 Q IGMP Configuration screen 



Choosing Add/Remove IGMP Control Table allows you to define up to 12 VL AN son the Switch which can send and 
receivelGMP packets. Choosing Configure IGMP Control Table allows you toenableor disable these agents, and 
set aging tinners fa them. Both screens are shown below: 
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Add/Remove IGMP Entry 




VID : [ 1 ] APPLY 
Current Status 
Enabled 



******************************************************************************* 



Message Area : 

Add or Remove IGMP Entry . 



CTRL+T=Root screen 



Esc=Prev . screen 
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Figure 6-25. Add/Remove IGMP Entry screen 



The above screen is used to specify an agent to interface between IGMP and VLAN . The agents are assigned to a VLAN 
and allow IGMP query and report packets to be present on the given VLAN. Only 12 agents can exist on the Switch at any 
onetime. 



Items in the above screen are described below: 

♦ Action Adds/Removes an entry (agent) from the table. 

♦ VID The VLAN number that you wish tocreatean agent for. 

GobacktotheConfigure 802.1Q IGMP screen and choose Configure IGMP Control Table(shown below) in order 
to activate or deactivate the agents and configure settings for them. 



Using the Console Interface 



53 



24-port NWay Ethernet Switch User's Guide 




Figure 6-26. IEEE 802.1 Q IGMP Configuration screen 



I tans i n the above screen are def i ned as fol I ows: 

♦ VLAN ID This is the VI D number for theVLAN that has an agent attached to it which enables IGMP packets to be 
sent and received. 

♦ Age-out Timer If no IGMP query packet has arrived at the Switch before this timer has expired, the Switch will 
become the IGMP host for this VLAN. 

♦ IGMP Status Activates/deactivates the agent on this VLAN. 
Configure VLANs & MAC-based Broadcast Domains 

If you are unsure about your knowledge of VLANs and broadcast domains, please review the VLANs and Broadcast 
Domains section in the "Switch Management Concepts" chapter of this manual beforeconfiguringtheswitch. 

The VLANs & MAC-based Broadcast Domains Configuration menu displays the status of the current VLAN 
modeand allows a user to restart theSwitch in a particular VLAN mode- Port-Based VLANsJEEE 802.1Q VLANs, 
or MAC-based Broadcast Domains - a to choose None. There are four different versions of the VLANs & MAC- 
based Broadcast Domains Configuration menu, depending on which of the options you select under the Restart 
Mode (three of the four aredisplayed and explained below— the menu for None is omitted as it does not contain additional 
menu items at the bottom of the screen). Please note that theSwitch can only support a single type of mode at any given 
time. 

To view the VLANs & MAC-based Broadcast Domains Configuration menu for MAC-based Broadcast 
Domains: 

L Choose Configure VLANs & MAC-based Broadcast Domains on the Configuration menu. 
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2. Select MAC-based Broadcast Domains under Restart Mcdeand then pressAPPLY. 

3. Press RESTART on the Change VLAN Modescreen (pictured below). This will cause the Switch to automatically 
save changes and then perform a reboot. 



Change VLAN Node 



Are you sure that you want to change VLAN mode? 
If you select RESTART and press ENTER, the switch 
automatically saves the changes and reboots. 



******************************************************************************* 



Message Area: 



CTRL+T=Root screen 



Esc=Prev. screen 



CTRL+R = Refres 



Figure 6-27. Change VLAN Mode screen 



4 Repeat thefirst step. Thefdlowing screen will appear: 
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VLANs 4 HAC-based Broadcast Domains Configuration 



Current Mode: HAC-based Broadcast Domains 
Restart Hode : <HAC-based Broadcast Domains^ 



Configure HAC-based Broadcast Domains 



******************************************************************* 
Hessage Area: 



CTEL+T=E.oot screen CTRL+S=Apply Settings Esc=Prev. screen CTEL+R = Eefres 











1 c pd n 1 1 







1 



Figure 6-28. VLANs & MAC-based Broadcast Domains Configuration menu for MAC-based Broadcast 

Domains 



The i information on the top of the screen is descri bed as fol lows: 

♦ Current Mode Either displays the current VL AN or MAC-based Broadcast Domain mode or None. 

♦ Restart Mode Choose from four settings: MAC-based Broadcast Domai ns (pictured above), IEEE 802.1Q 
VLANs, Port-Based VLANs, or None. 



Configure MAC-based Broadcast Domains 

Tocreatea MAC-based Broadcast Domain, simply create the Broadcast Domain itself in the Add/Remove MAC- 
based Broadcast Domains screen by selecting Add intheAction field, entering a name in the Domain Name field, 
and then pressing APPLY). Next, select the Broadcast Domain you have created in the Add/Remove MAC-based 
Broadcast Domain Members screen. Finally, assign MAC addresses fa each Broadcast Domain member you want 
to add in the Add/Remove MAC-based Broadcast Domain Members screen-select Add in theAction field, enter 
a MAC Address in the next field, and then press APPLY. Note that once all additions and changes have been completed, 
you must restart the Switch for the M AC-based B roadcast Domai ns to be i mplemented. 

To access the MAC -based Broadcast Domains Configuration menu, open Configuration, choose Configure 
VLANs & MAC-based Broadcast Domains, and select Configure MAC-based Broadcast Domains at the 
bottom of the VLANs & MAC-based Broadcast Domains Configuration menu (theCurrent Mode must be 
MAC-based Broadcast Domai ns).Thefollowing menu appears: 
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MAC-based Broadcast Domains Configuration 



,dd/Remove HAC-based Broadcast Domains 



Add/ Remove HAC-based Broadcast Domain Member 



**************************************** 



Message Area: 



CTRL+T=Root screen 



Esc=Prev. screen 



CTRL+R = Refres 



-13 



Figure 6-29. MAC-based Broadcast Domains Configuration menu 



Choose Add/Remove MAC-based Broadcast Domain toacoassthefd lowing screen: 



Using the Console Interface 



57 



24-port NWay Ethernet Switch User's Guide 



Add/Remove MAC-based Broadcast Domains 
Action: < Add > Domain Name: [Accounting ] 
Broadcast Domains Number of Members 

Shipping Z 



******************************************************************** 
Message Area: 



CTEL+T=Root screen 



Esc=Prev. screen 



CTEL+E = Refres 
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"IVTIOO 



"|9G00 8-N-1 
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| CAPS | |vj u (v| | Capture 



Figure 6-30. Add/Remove MAC-based Broadcast Domains screen 

The fields you can set are: 

♦ Action Add or Removea MAC-based Broadcast Domain. 

♦ Domain Name Enter the name of the MAC-based Broadcast Domain. 
Press APPLY tocreateor remove thedesignated MAC-based Broadcast Domain. 

Broadcast Domains and Number of Members reflect the current conditions. They are read-only fields and cannot 
be changed. 

Choose Add/Remove MAC-based Broadcast Domain Member from the MAC -based Broadcast Domains 
C onfi gur ati on menu to access the fol lowi ng screen : 
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Add/E.emove HAC-based Broadcast Domain Members 



Select a Broadcast Domain: 



Shipping 



**************************************************** 



lies sage Area: 



CTRL+T=Root screen 



Esc=Prev. screen 



CTRL+H = Eefres 



Figure 6-31. the first Add/Remove MAC-based Broadcast Domain Members screen 



To configures MAC-based Broadcast Domain member, highlight the desired entry on the screen aboveand press <E nter>. 
The following screen appears: 
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{ Add/ Remove MAC-based Broadcast Domain Members 

! Current Broadcast Domain: Shipping 

1 Action: <Add > HAC Address: [000099112233] 
Numb e r of memb e r s : 2 

MAC Address Status MAC Address Status 

000011223344 Apply 
000055SS7788 Apply 

1 ******************************************************************************* 
Message Area: 

1 Esc = Previous screen CTRL+R = Refresh N - Next Page P - Previous Page 



















Figure 6-32. the second Add/Remove MAC-based Broadcast Domain Members screen 



The fields you can set are: 

♦ Action Select the desired action bytoggling between Add and Remove. 

♦ MAC Address The M AC address of the B roadcast Domai n member bei ng added or removed. 

Please notethat the Status field for the MAC address you have entered will read Not Apply if it isthesameMAC 
address entered i n thefi Iteri ng and forwardi ng table. 

Current Broadcast Domain, Number of members, MAC Address (in thelower part of the screen), and Status 
reflect the current conditions. They are read-only fields and cannot be changed. 

Configure Port-based VLAN 

If you are unsure of your knowledge of port-based VLANs, we highly recommend reviewing the VLANs and Broadcast 
Domains section of the "Switch Management Concepts" chapter in this manual before proceeding. 

Toview the VLANs & MAC-based Broadcast Domains Configuration menu for Port-based VLANs: 

L Choose Configure VLANs & MAC-based Broadcast Domains on the Configuration menu. 

2. Select Port-Based VLAN sunder Restart Modeand then press APPLY. 

3. Press RESTART on theChange VLAN Modescreen. This will cause the Switch to automatically save changes and 
then perform a reboot. 

4. Repeat thefirst step. Thefdlowing screen will appear: 
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VLANs 4 MAC-based Broadcast Domains Configuration 



Current Mode: Port -Based VLANs 
Restart Mode : <Port -Based VLANs 



Configure Port-based VLAH 



******************************************************************* 
Message Area: 



CTPL+T=Poot screen CTPL+S=Apply Settings Esc=Prev. 



CTPL+P = Pefres 
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Figure 6-33. VLANs & MAC-based Broadcast Domains Configuration menu for Port-Based VLANs 



Choose Configure Port-Based VLAN on the screen above to access the Configure VL AN (Port-Based) menu: 
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Configure VLAN (Port-Based) 



Management VLAN: <DEFAULT_VLAN> 

Add a Port-Eased VLAN 
Edit/Delete a Port-Based VLAH 



******************************************************************* 
Message Area: 



CTRL+T=Root screen 



Esc=Prev. screen 



CTRL+R = Refres 



- 



Figure 6-34. Configure VLAN (Port-Based) menu 

To create a Port-based VLAN, select Add a Port-Based VLAN on the screen above and then press APPLY. The 
following screen appears: 



62 



Using the Console Interface 



24-port NWay Ethernet Switch User's Guide 



Create a Port-based VLAH 
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********************************************************************* 



Hessage Area: 
| I Press Enter to make the VLAH settings active. 



CTRL+T=Root screen CTRL+S=Apply Settings Esc=Prev. screen CTRL+R = Refres 



J3 



Figure 6-35. Create a Port-based VLAN screen 

Enter a name for your new VLAN in the VLAN Name field at the top of the screen above. Next, select which ports will 
become members of the VLAN by toggling between Yes and No in the Member column. Click APPLY to let the changes 
i mmedi ate! y take effect. 



To modify or delete a Port-based VLAN, select Edit/Delete a Port-Based VLAN on the screen above and then press 
APPLY. The following screen appears: 
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Edit/Delete a Port-based VLAN 



Edit/Delete a VLAU 
Action: <Edit > 



After choosing an action 
select a VLAU from, the 
list at the right and 
press Enter. 



VLAU Uame Ports 
DEFAULT VLAU 20 



******************************************************************************* 
Hessage Area: 

Use the arrow keys to select a VLAU then press Enter. 



CTRL+T=Root screen CTRL+S=Apply Settings Esc=Prev. 



CTRL+R = Refres 



Connsctsd 5" 30" 07 



VTinn 



1 9600 8-N-1 [SCROLL | CAPS [~| 



Ire | Print echo 



Figure 6-36. Edit/Delete a Port-based VLAN screen 

After selecting Edit or Delete in the Action field, choose a VLAN from the list on the right-side of the screen above and 
then press <Enter>. 
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Edit /Delete a Port-based VLAN 



VLAN Name: Sales 
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Figure 6-37. Edit/Delete a Port-based VLAN table 

Use this screen toeither add or drop a member from a spedfied VLAN. Press APPLY when finished with all your changes. 



Configure IEEE 802.1 Q VLANs 

Toconfigurean IEEE 802.1 port-based VLAN, you must do three things: 

1. Dedde if you want to enable I ngress Filtering and enable it on the chosen ports. Ingress filtering applied on a port 
causes the port to examine all incoming packets and check whether the port itself is a member of the VLAN. This is 
normally used to keep untagged frames off the Switch, although it can have other uses as well. This setting is 
configurableforeach pat in the Configure Port Ingress Filter screen. 

2. Define which ports will be active members of the VLAN . A port can transmit packets onto only one VLAN. It can 
receive packets (bea passive member) on many VLANs. Active VLANs are designations are defined by assigning Port 
VLAN I D numbers (PVI Ds) in theConfigure Port VLAN I D screen. 

3. Define the VLAN itself and which ports will be members (able to receive packets from a port that has this PVID 
number). At this point, you need to designate whether a member pat will bea Tagging or Untagging member pat. 
Defining the pats that will be members of a VLAN, and whether they will Tag a Untag packets is dae in the 
Configure Static VLAN Entry screen. 

4. Determine whether to enable GARP VLAN Registratia Prrtaol (GVRP) in ader to update dynamic registratia 
entries as well as to communicate infamatia toaher VLAN-awarewakstatias and bridges, thus allowing aders 
to issue and revoke VLAN membership. GVRP can be enabled fa individual pots or\ the GVRP Configuration 
screen. 
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To view the VLANs & MAC -based Broadcast Domains Configuration menu for MAC-based Broadcast 
Domains: 

1. Choose Configure VLANs & MAC-based Broadcast Domains on the Configuration menu. 

2. SelectlEEE 802.1Q VLANsunder Restart Modeandthen press APPLY. 

3. Press RESTART on theChange VLAN Modescreen. This will cause the Switch to automatically savechanges and 
then perform a reboot. 

4. Repeat thefirst step. Thefdlowing screen will appear: 



VLANs 4 MAC-based Broadcast Domains Configuration 



Current Mode: IEEE 802 _1Q VLANs 
Restart Mode : <IEEE 802. 1Q VLANs 



Configure IEEE 802. 1Q VLANs 
Configure G-MK.P 



******************************************************************************* 



Message Area: 



CTRL + T = E.oot screen CTPJ, + S=Apply Settings Esc = Prev. 



CTE.L + E = Refres 





| Connected 2:10:32 


VT100 


|9600 8-N-1 






NUM 







Figure 6-38. VLANs & MAC-based Broadcast Domains Configuration menu for IEEE 802.1 Q VLANs 



Choose Configure IEEE 802.1Q VLANs on the screen above (under Configure VLANs & MAC-based 
Broadcast Domains of the Configuration menu) to access the IEEE 802.1Q VLANs Configuration menu: 
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IEEE S0Z.1Q VLANs Configuration 



Management Vid: [1 



] 



Configure Port Ingress Filter 
Configure Port VLMT ID 
Configure Static VLAN Entry 
Configure Port G-VRP Settings 



********************************************************************* 



Message Area: 



CTRL+T=Root screen CTRL+S=Apply Settings Esc=Prev. screen CTRL+R = Refres 



E 



Figure 6-39. IEEE 802.1 Q VLANs Configuration menu 

Enter a Management VID in the first field and press APPLY toletthechangetakeeffect. 
The field you can set is: 

♦ Management Vid WhenlEEE 802. 1Q VLANs areenabled, this istheVLAN thatwill be used for management 
packets. MakesuretheSwitch pat that the management station is connected to has this PVID number and isa 
member of this 802.1Q VL AN (VID). This should bethe first VLAN you create, otherwise, you may not be able to 
communicate with the Switch except through the console port. 



ChooseConfigurePort Ingress Filter to access the first item on the menu. The following screen appears: 
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Ingress Filtering 
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Figure 6-40. Ingress Filtering screen 



This screen allows you toenableor disable Ingress filtering for each port. When a packet arrives at the port and Ingress 
filtering is Enabled, the port will check the VLAN ID number of the packet, and its own VI Ds. If there is a match, the pat 
will receive the packet. Ifthe packet doesn't havea VLAN tagortheportisnotamemberoftheVLAN for which the 
packet is tagged, the packet will be discarded. 



Choose Configure Port VLAN ID to access the second item on the IEEE 802. 1Q VLANs Configuration menu. The 
following Port VLAN assignment screen appears: 
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Figure 6-41 . Port VLAN assignment screen 



This screen al lews you to set a Pat VLAN ID number (PVID) for each port. Press APPLY to let the changes take effect. 



Choose Configure Static VLAN Entry to access the third item on thelEEE 802.1Q VLAN s Configuration 
menu. The following 802. 1Q Static VLAN Settings screen appears: 
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Status 



302. 1Q Static VLAN Settings 

VID: [^|] VLMT Name: [ ] Entries: 4 

1 6 7 14 15 ZZ SI SZ 

Tag/Untag : [UUUUUU] [UUUUUUUU] [UUUUUUUU] [UU] [U] 

Egress/Forbidden: [ ] [ ] [ ] [--] [-] 

State : ^Active > APPLY 

The VLAN is now active. 

VID VLAN Name Port List -Tag/Untag, Egress/Forbidden 

1 D E F AUL T_VL AN UUUUUU UUUUUUUU UUUUUUUU UU U 

EEEEEE EEEEEEEE EEEEEEEE EE E 
Z vZ UUUUUU UUUUUUUU UUUUUUUU UU u 

EEEEEE EEEEE — - 

3 UUUUUU UUUUUUUU UUUUUUUU UU U 

£ v6 jjjjj^ jjjjjj^^ jjjj^^jj jjjj j 

EEEEEE EEEEEEEE EEEEEEEE EE E 

**************************************************************** 
Message Area: 
Enter VID (1-4094) : 

Esc = Previous screen CTRL+R = Refresh N - NeKt Page P - Previous Page 



Figure 6-42. 802.1 Q Static VLAN Settings screen 



The fields you can set are: 

♦ VID EnteraVLAN IDfr<mlto4094.ThisistheVLAN thatwill bedefined on this screen. 

♦ VLAN Name Description of theVLAN. 

♦ Tag/U ntag Toggle between T for tag and U for untag for each port. 

♦ Egress/Forbidden Position thecursor over thedash "-" representing the appropriate pat number and press <space 
bar>to select E for Egress, F for Forbidden or leave the dash An E designates thespecified port as a static member 
of the VLAN. An F defines the port as a non-member and also forbids the port from joining a VLAN dynamically. A 
dash (-) means the port is not given VLAN membership for the VID entered above. 

♦ State Toggle between Acti ve and I nacti ve 

A table on the lower part of the screen displays the settings for each VLAN. The tabledisplays the VLAN number (VID), 
VLAN Name, andTag/Untag and Egress (membership) status for all ports. 

Choose Configure Port GVRP Settings to access the fourth item on thelEEE 802.1Q VL AN s Configuration 

menu. The fdlowingGVRP Configuration screen appears: 
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G-VRP Configuration 
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Figure 6-43. GVRP Configuration screen 



Thisscreen allows you to enableordisableGARP VLAN Registration Protocol (GVRP), whereGARP istheGeneric 
Attribute Registration Protocol, on individual ports. 

GVRP updates dynamic VLAN registration entries and communicates the new VLAN information across the network. 
This allows, among other things, for stations to physically move to other switch ports and keep their same VLAN settings, 
without having to reconfigure VLAN settings on the Switch. 



Configure GMRP 

Group Multicast Registration Protocol (GMRP) allows multicasts to be sent on a single VLAN without affecting other 
VLANs or broadcast domains. Group registration entries indicate for each port whether frames to be sent to a group MAC 
address and on a certain VLAN should be filtered or discarded. Use the GMRP Configuration screen to enable or 
disableGMRP. 



Choose Configure GMRP from the bottom of the VLANs & MAC -based Broadcast Domains Configuration 

screen (theSwitch must already be in IEEE 802.1Q VLANs mode) to access the following GMRP Configuration 

screen: 
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The Switch GMRP field allows you to either enable or disable GMRP on the Switch by toggling between the two choices 
and then pressing APPLY to let the change take effect. 

Once GMRP is enabled for the Switch, you then must enable spedfic ports by selecting Configure Port GMRP 
Settings from theG MRP Configuration screen below. Press APPLY tolet your changes take effect. 
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GMRP Configuration 
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Figure 6-45. the second GMRP Configuration screen 



Configure Static Multicast Forwarding 

M ulticast forwarding allows you to forward traffic over each port for one multicast group. 

To access the first version of the Static Multicast Forwarding Table (when IEEE 802.1Q VLANs is selected on 
the VLANs & MAC -based Broadcast Domains Configuration screen), open Configuration, select 
Configure VLANs & MAC -based Broadcast Domains, and then choose Configure GMRP. Now select 
Configure Static Multicast Forwarding from the bottom of theGMRP Configuration screen. The following 
screen appears: 
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Static Multicast Forwarding Table 



VID: [| 



] 



MAC Address: [000000000000] 

16 7 14 IS 22 SI S2 

Egress/Forbidden: [ ] [ ] [ ] [--] [-] 

State : -^Permanent > APPLY 

The entries is now active. 



Status 



Entries: Z 



VID MAC Address 

5 012345678900 

6 012345678912 



Egress/Forbidden 
-E-E-F 



State 

Permanent 

Permanent 



**************************************************************** 
Message Area: 
Enter VID (1-4094) : 

Esc = Previous screen CTPL+P = Refresh H - Next Page P - Previous Page 
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Figure 6-46A. Static Multicast Forwarding Table screen 



To add an entry a make a change to an entry on the Static Multicast Forwarding Table, enter a VL AN ID, enter a 
MAC address, choose E gress or Forbidden for each port, choose a State (Delete on Reset, Delete on Timeout, Invalid, 
or Permanent), and then pressAPPLY to put the change into effect. 

I terns i n the above wi ndow are def i ned as fol lows: 

♦ VID ThisistheVLAN that will be defined on this screen. Notea VLAN ID is from 1 to 4094. 

♦ MAC Address TheMAC address of the newly created Static Multicast Forwarding Tableentry. 

♦ Egress/Forbidden Position the cursor over the dash "-" representing the appropriate port number and press the 
<space bar>to select E for Egress, F for Forbidden, or leave thedash An E designates the specified port as a static 
member of the VLAN. A dash means the port is not given VLAN membership for the VID entered above An F forbids 
the port from joining a VLAN dynamically. 

♦ State Choose how you want the Switch to deal with the newly created Static Multicast Forwarding table entry: 
Delete on Reset, Deleteon Timeout, I nvalid, or Permanent. 



When Port-Based VLANs, MAC-based Broadcast Domains, or None are selected on the VLANs & MAC -based 
Broadcast Domains Configuration screen, the following Static Multicast Forwarding Tablescreen appears: 
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Static Multicast Forwarding Table 



Static Forwarding Entries: 0 

Action: <Add > MAC Address: [000000000000] 
Port: 1 6 7 14 IS 22 SI S2 
[ j[ ]t j [ — ][-] 

Dst MAC Address Dst Port HAP 



Status 



******************************************************************************* 
Message Area: 

Esc = Previous screen CTPL+R = Refresh N - Next Page P - Previous Page 



Figure 6-46B. Static Multicast Forwarding Table screen 

To add an entry a make a change to an entry on the Static Multicast Forwarding Table, select Add or Remove in 
thefirst field, enter the multicast MAC address in the next field, assign the outgoing ports by typing a "V", and then press 
APPLY to put thechanges intoeffect. 

Configure Trunk 

Ports on the Switch can be grouped together in a single logical port called a trunk. This is discussed in detail in the Port 
Trunking section of the Switch Management Concepts chapter of this manual. 



To setup a trunk group, choose Configure TRU NK in theConfiguration menu. The following screen appears: 
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Configure Trunk 



Haster 
7 

15 
S1P1 



Width 
<5 ports> 

<Z ports> 

2 ports 



Group name Status 
[SalesZ ] ^Enabled > 
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] <Disabled> APPLY 
] <Disabled> APPLY 



********************************************************************** 



Hess age Area: |jiySfffrl£ 

Apply trunk settings. 



CTPL+T=Root screen 



Esc=Prev. screen 
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' I r-- a r-ir- T. 



Figure 6-47. Configure Trunk screen 



The fields you can set are: 

♦ Master Therearethreelistingsrepresentingthemaster portforeach ofthethreetrunk groups availableon the 
Switch. The master pat for each group is preset and cannot be changed. 

♦ Width Select between 2 to 8 ports in thefi rst two entries far this field. The number of pats defined herestartfrom 
the master pat and count up. Thus, in the example pictured above cataining a width of 5 ports in thefi rst trunk, the 
pats in thetrunk group will include ports 7 (master), 8, 9, 10 and ll.Thethird entry (used fa 2-pat frat-panel 
modules) has a permanent setti ng of 2 ports. 

♦ Group name Enterthedesired group name 

♦ Status E nables or disables this trunk group. Becareful when disabling trunk groups as thecanectias will returnto 
namal cperatia and may cause signal loops. 

PressAPPLY to let the changes take effect. 



Update Firmware and Configuration Files 

TheSwitch is capableof obtaining itscafiguratia settings (the same settings defined in this console program), as well as 
updated versias of its internal switching software (the ooisole program itself), using TFTP (Trivial File Transfer 
Prrtaol). You can use the Update Firmware and Configuration Files screen to control this feature 

Choose Update Firmware and Configuration Files to access the fourth item a the Switch's main menu. The 
following screen appears: 
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Update Firmware and Configuration Files 

Software Update Mode: <Hetwork> 

TFTP Server Address : [10.9.18.1 ] 

Update Firmware: 

Firmware Update: <Disabled> 

File Name: [D:\project\utils\mpc850\tftp\3 225_run.t] 

Use Configuration File: 

Use Conf ig File: < Enabled > 

File Name: [D:\project\utils\mpc850\tftp\3 225cfg.cf] 
Last TFTP Server Address : 10.9.18.1 

0 



RESET SWITCH TO START UPDAT 



******************************************************************************* 



Message Area : 



CTRL+T=Root screen CTRL+S= Apply Settings 



Esc=Prev . screen CTRL+R = Refres 



-■ 



Connected 1:57:41 |VT100 |9G00 8-N-1 



Print ech 
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Figure 6-48. Update Firmware and Configuration Files screen 



After making your changes in the fields above, press RESET SWITCH TO START UPDATE to initiate the update 
sequence 

The fields you can set are: 

♦ TFTP Server Address The IP address of the TFTP server where the runtime (switching software) or 
configuration file is located. This entry is used only if the Firmware Update is set to Enabled. 

♦ Firmware Update Determines whether or not the Switch will try to look for a runtime image file on the TFTP 
server. 

♦ File Name The complete path and filename of the runtime image file on your TFTP server to be uploaded to the 
switch. 

♦ Use Config File Toggle to Enabled to use the settings in a configuration text file when the switch is reset 
(rebooted). Theconfiguration file is explained in detail in the Sample Configuration File Appendix. 

♦ File Name The complete path andfilenameon theTFTP server for configuration fileto be used. 



System Utilities 

The Utilities menu offers three system utility options, Ping Test, Save Settings to TFTP Server, and Save 
Switch History toTFTP Server. The following window will beopened: 
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Utilities 



Save Settings to TFTP Server 

Save Switch History to TFTP Server 



******************************************************************************* 



Message Area : 



CTRL+T=Root screen 



Esc=Prev . screen 



CTRL+R = Refres 



-■ 
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Icrpni I 
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Print echo 



Figure 6-49. Utilities menu 



Ping Test 

C hcose P i ng Test to access the fol I owi ng screen : 
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Ping Test 

Destination IP Addr ess : [ 10 . 24 . 22 . 2 ] 
Repet itions: [2 ] APPLY 

Result Reply 2 Time out 0 Unreachable 0 

1. Reply from 10.24.22.2, time<10ms. port=0 

2. Reply from 10.24.22.2, time<10ms. port=0 
Stop ping 



******************************************************************************* 



Message Area: 

Start ping test (Press Esc to stop). 



CTRL+T=Root screen CTRL+S=Apply Settings Esc=Prev. screen CTRL+R = Refres 



S 



Connected 1:41:52 |VT100 |9600 8-N-1 | SCROLL |CAPS |NUM | Capture | Print echo ^ 

Figure 6-50. Ping Test screen 



After fi 1 1 i ng i n thef ields above, press START to i niti ate the P i ng test. 
The fields you can set are: 

♦ Destination IP Address ThelP addresser thedeviceto be Pinged. 

♦ Repetitions Amount of times the Switch should send the Ping (1-255). If zero is chosen, the Switch will continue 
Pinging indefinitely. 

In the lower part of the Ping Test screen, you can view the Ping status, including Result, Reply, Time out, and 
Unreachable. 



Save Settings to TFTP Server 

Choose Save Settings to TFTP Server from the Utilities menu (under System Utilities on the main menu) to 
access the fol I owi ng screen : 
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Save Settings to TFTP Server 



Server IP Address: f ] 

File Name: [g:\sysl\d-link\des-32~l\last_35.bc 

START 

Result 



APPLY 



******************************************************************************* 




Message Area: 

Enter the Server IP address. 



CTPL+T=Poot screen CTPL+S=Apply Settings Esc=Prev. screen CTPL+P 



■ 

VT100 



9600 8-N-1 CAPS NUM Capture Print echo 



Figure 6-51 . Save Settings to TFTP Server screen 

The fields you can set are: 

♦ Server IP Address The IP address of theTFTP server where you wish to save the settings for theswitch. 

♦ File Name Thecomplete path and filename for the file. 

Press START to begin the saving procedure. The result will bedisplayed in the lower part of the screen. 



Save Switch History to TFTP Server 

Choose Save Switch History to TFTP Server from the Utilities menu (under System Utilities on the main 
menu ) to access the fol I owi ng screen : 
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Save Switch History to TFTP Server 



Server IP Address: [ 20 . 17 _ 18 _ 120 
File Name: [c:\temp\history 



Result 



] APPLY 



************************************************************************ 




Message Area: 
Begin the save procedure. 



CTRL+T=Root screen CTEL+S=Apply Settings Esc=Prev. screen CTRL+R = Refres! 



1 

VT100 |9600 8-N-1 [SCROLL |CAPS |NUM | Capture 



Figure 6-52. Save Switch History to TFTP Server screen 

The fields you can set are: 

♦ Server IP Address ThelP address of theTFTP server where the switch history filewill belocated. 

♦ File Name ThecornpletepathandfilenarneontheTFTPserverfathefile. 

Press START to begin the filesave. The result will be displayed in thelower part of the screen. 



SNMP Manager Configuration 



The Switch sends out SNMP traps to network management stations whenever certain exceptional events occur, such as 
when the Switch is turned on or when a system reset occurs. The Switch al lows traps to be routed to up to four different 
network management hosts. 

For a detailed list of Trap Types used for this Switch, see the Traps section of Chapter 5 "Switch Management 
Concepts." 

SNMP (version 1) implements a rudimentary form of security by requiring that each request includes a community 
name A community name is an arbitrary string of characters used as a "password" to control access to the Switch. If the 
Switch receives a request with a community name it does not recognize, it will trigger an authentication trap. 

The SNMP allows up to four different community names to be defined. The community name public is defined by 
default; you can change this name in addition to adding others. You will need to coordinate these names with the 
community name settings you use in your network management system. 



ChooseSNMP Manager Configuration toaccessthethird item on the main menu. Thefollowing screen appears: 
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SNMP Manager Configuration 



SNMP Community String 

[ SS^^^^^^^^H ] 

[ p r ivat e ] 
[ ] 
[ ] 



Access Right 
<Read Only> 
<Read/"OTrite> 
-=:Read Only> 
<Read Only> 



SNMP Trap Manager Configuration 



IP Address 

[10.9.68.2 ] 

[192.168.168.12 ] 

[ ] 

[ ] 



SNMP Community String 

[public ] 

[public ] 

[ ] 

[ ] 



Status 
<Valid > 
<Valid > 
<Invalid> 
< Invalids- 



Status 
<Valid > 
<Valid > 
<Invalid> 
<Invalid> 



APPLY 



******************************************************************************* 



Message Area: 

Edit SNMP Community Strings. 



CTPL+T=Poot screen CTEL+S=Apply Settings Esc=Prev. screen CTEL+E 



VT100 |9G00 8-N-1 |CAPS |NUM | Capture 

Figure 6-53. SNMP Manager Configuration screen 



A 



ThefollowingSNMP Manager andTrap Manager Configuration parameters can beset: 

♦ SNMP Community String Thecommunitystringthat will be included on SNMP packets sent to and from the 
switch. Any station not privy tothis community will not receivethe packet. 

♦ Access Right Allows each community to be separately set to either Read Only, meaning that the community 
member can only view switch settings or Read/ Write, which allows the member to change settings in the switch. 

♦ Status Determineswhether this community nameentry isValid or I nvalid. An entry can be disabled by changing 
its status to I nval id. 



♦ I P Address The I P address of the network management station to receive traps. 



Switch Monitoring 



The Switch uses an SN M P agent which monitors different aspects of network traffic. The SNMP agent keeps counters and 
statistics on the operation of the Switch itself, and on each port on the Switch. The statistics obtained can be used to 
monitor theconditions and general efficiency of the Switch. 



Network Monitoring 

The Network Monitoring menu offers six items, Traffic Statistics, Browse Address Table Browse IGMP 
Status, Browse GVRP Status, Browse G MRP Status, and Switch History. 
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Choose Network Monitoringfrom the main menu. The following menu appears: 



Network Honitoring 



Traffic Statistics 



Browse Address Table 
Browse IGMP Status 
Browse GVRP Status 
Browse CHRP Status 
Switch History 



****************************************************************************** 
Message Area: 



CTRL+T=Root screen 



Esc=Prev. screen 



CTRL+R = Pefres 



Connected 5:29:23 



VT100 



9600 8-N-1 



NUM 



Figure 6-54. Network Monitoring menu 

The first item on this menu permits you to acoass four different tables that observe the condition of each individual port. 



Traffic Statistics 

TodisplaytheTraffic Statistics menu, choose thefirst item on the Network Monitoring menu. The following menu 
appears: 
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Traffic Statistics 



Port Traffic Statistics 
Port Packet Error Statistics 
Port Packet Analysis Statistics 



******************************************************************************* 



Message Area : 



CTRL+T=Koot screen 



Esc=Prev . screen 



CTRL+R = Refres 



Connected 4:32:05 |VT100 |9G00 8-N-1 



Icrpni I 



"I CAPS |NUM | Capture 



Print echo 



Figure 6-55. Traffic Statistics menu 



Statistics Overview 

To access the first item on theTraffic Statistics menu, choose Statistics Overview. The following table appears: 
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Statistics Overview 
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ITessag-e Area: 



CTPL+T=Root screen 



Esc=Prev. screen 



CTEL+P = Pefres 



lected 4:40:27 



11 00 
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LL | CAPS [n 



Prifh Qr-hr 



Figure 6-56. Statistics Overview screen 



Select the desired increment setting in the Polling Interval field: 2 sec, 5 sec, 15 sec, 30 sec, 1 min, or Suspend. 
Pressing CLEAR COUNTER resets the counters on this screen. 

Thestatisticcounters displayed aredefined as follows: 

♦ TX/sec The number of good bytes sent from the respective port per second. 

♦ RX/sec Thenumberofgoodbytesrecevedpersecond.Thisalsoindudeslocalanddroppedpackets. 

♦ %Util. This shows the percentage of available bandwidth each port is using over the amount of time spedfied by the 
update interval. For example, when a 10 Mbps port is relaying packets at 5 M bps, the utilization is 50%. 

Port Traffic Statistics 

To access the second item on theTraffic Statistics menu, choose Port Traffic Statistics. The following table 
appears: 
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Port Traffic Statistics 
I Ports: <\ 



Port : 
Speed 

% Utilization 
Bytes Recv. 
Bytes Sent 
Frames Recv. 
F r ame s S ent 
Total Bytes Recv 
Total Frames Recv 



CLEAR COUNTER 




Polling 


Interval : < Z 


1 1 


1 Z 


1 3 


1 4 


1 - 
10 


1 - 
10 


1 - 
10 


1 - 
10 
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1 0 


1 0 


1 0 
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1 0 


1 0 
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10 


10 
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10 


10 


10 


10 


10 


10 


10 



1000000000000 1000000000000 1000000000000 1000000000000 I 




Figure 6-57. Port Traffic Statistics screen 

Select the desired setting in the Ports field: 1 to 4, 5 to 8, 9 to 12, 13 to 16, 17 to 20, 21-S1P2, or Slot 2 and the 
desired increment setting in the Polling Interval field: 2 sec, 5 sec, 15 sec, 30 sec, 1 min, or Suspend. Pressing 
CLEAR COUNTER resets the counters on this screen. 

Thestatisticcounters displayed aredefined as follows: 

♦ Speed lfthelinkisup,thespeedandduplexstatuswill bedisplayed; if thelink isdown "-"will bedisplayed. 

♦ % Utilization This shows the percentage of available bandwidth each port is using over the amount of time 
specified by the update interval. For example, when a 10 Mbps port is relaying packets at 5 Mbps, the utilization is 
50% 

♦ Bytes Recv. Thenumber of good bytes received. This also indudes local anddropped packets. 

♦ Bytes Sent The number of good bytes sent from the respective port. 

♦ Frames Recv. The number of good frames received. This also indudes local and dropped packets. 

♦ Frames Sent The number of good frames sent from the respective port. 

♦ Total Bytes Recv. The number of bytes received, good and bad. 

♦ Total Frames Recv. The number of frames received, good and bad. 

♦ Last Seen MAC The MAC address of the last device that sent packets over this port. 
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Port Packet Error Statistics 

Toaccessthethird item on theTraffic Statistics menu, choosePort Packet Error Statistics. The following table 
appears: 



Polling Interval: < Z sec > 



Port Packet Error Statistics 

Ports: <[^^H> CLEAR COUNTER 

Port: I 1 

Speed. I 

CPC Error | 0 

Oversize Frames 1 0 

Fragments I 0 

Jabber 10 

Late Collision | 0 

Mac Rk Error |0 

Dropped Frames | 0 
Undersize Frames I 0 

Total errors 10 

Collisions | 0 



******************************************************************************* 
Message Area: 

Select a group of ports to display error statistics. 
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Figure 6-58. Port Packet Error Statistics table 



Select the desired setting in the Ports field: 1 to 4 5 to 8, 9 to 12, 13 to 16, 17 to 20, 21-S1P2, or Slot 2 and the 
desired increment setting in the Polling Interval field: 2 sec, 5 sec, 15 sec, 30 sec, 1 min, or Suspend. Pressing 
CLEAR COUNTER resets the counters on this screen. 

Thestatisticcounters displayed aredefined as follows: 

♦ Speed lfthelinkisup,thespeedandduplexstatuswill bedisplayed; if thelink isdown "-"will bedisplayed. 

♦ CRC Error The number of frames that fail the CRC integrity check. 

♦ Oversize Frames The number of good frames with length greater than 1536 bytes and therefore are greater than 
the maximum legal length. 

♦ Fragments The number of packets less than 64 bytes with either bad framing or an invalid CRC. These are 
normal I y the resul t of col I isi ons. 

♦ J abber The number of frames with length more than 1536 bytes and with CRC error or misalignment (bad 
framing). 

♦ Late Collision The number of collisions that occur at or after the 64 th byte(octet) intheframe. 

♦ Mac Rx Error The number of frames with received MAC Errors. 
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♦ Dropped Frames Thenumber offrames which aredropped bythis port sincethelast Switch reboot. 

♦ Undersize Frames Thenumber of frames detected that are less than the minimum permitted frame size of 64 
bytes and havea goodCRC. Undersize frames usually indicate collision fragments, a normal network occurrence. 

♦ Total errors The sum of the CRC Error, Oversize Frames, Fragments, J abber, Late Collision, Mac Rx Error, 
Dropped F rames, and U ndersize F rames counters. 

♦ Collisions Thenumber of collision that has occurred. 



Port Packet Analysis Statistics 

To access the fourth item on the Traffic Statistics menu, choose Port Packet Analysis Statistics. Thefollowing 
table appears: 



Packet Analysis Statistics 



Port 
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************************************************************************* 

Message Area : 

Select a port to display statistics. 



CTRL+T=Root screen 



Esc=Prev . screen 




Figure 6-59. Packet Analysis Statistics table 



Select the desired setting in the Ports field: 1 to 4 5 to 8, 9 to 12, 13 to 16, 17 to 20, 21-S1P2, or Slot 2 and the 
desired increment setting in the Polling Interval field: 2 sec, 5 sec, 15 sec, 30 sec, 1 min, or Suspend. Pressing 
CLEAR COUNTER resets the counters. 

Thestatisticcounters displayed aredefined as follows: 

♦ 64, 65-127, 128-255, 256-511, 512-1023, 1024-1518 The number of good frames of various length ranges, both val id 
and invalid. 

♦ RX (GOOD) The number of good frames received. This also indudes local and dropped packets. 

♦ TX (GOOD) The number of good frames sent from the respective port. 

♦ Total RX Thenumber offrames received, good and bad. 

♦ TX Octets The number of good bytes sent from the respective pat. 

♦ RX Octets The number of good bytes received. This also includes local and dropped packets. 
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♦ Total RX The number of bytes received, good and bad. 

♦ Unicast RX/Unicast TX The number of good unicast frames received and sent. This includes dropped unicast 
packets. 

♦ Multicast RX/Multicast TX The number of good multicast frames received and sent. This includes local and 
dropped multicast packets. 

♦ Broadcast RX/Broadcast TX The number of good broadcast frames received and sent. This includes dropped 
broadcast packets. 

Browse Address Table 

The Browse Address Table allows the user to view which Switch port(s) a specific network device uses to communicate 
on the network. You can sort this table by MAC address, port, or VLAN. This is useful fa viewing which ports one device is 
usi ng, or which devices are usi ng one port. 

Todisplay the Browse Address Table choose Network Monitoringfrom the main menu and then choose Browse 
Address Table The following screen appears: 
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More - 

















Message Area: 

Select the first sorting index. 

Esc = Previous screen CTPL+P = Refresh N - Next Page P - Previous Page 




Figure 6-60. Browse Address Table 



To browse by MAC address, select MAC address in the Search by field, enter the desired MAC address in the next field, 
and then press FIND. 

To browse by port number, select Port in the Search by field, enter the desired port in the next field, and then press FIND. 
To browse by VLAN, select VLAN in the Search By field, enter the desired VLAN in the next field, and then press FIND. 
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The lower part of the screen is a read-only Browse Address Table that contains Port, MAC Address, Learned status, 
and the VL AN number of each entry. UseN to advance to the next pageand P to return to the previous page. 



Browse IGMP Status 

TheBrowse IGMP Status function allows you to browse I nternet Group Management Protocol (IGMP). The Switch is 
able to recognize IGMP queries and reports sent between stations and an IGMP router. When enabled for IGMP snooping, 
the Switch can open a close a port to spedfic devices based on the I GM P messages sent from the device to the router or 
vice versa. 

To display the IP Multicast Information screen, choose Network Monitoring from the main menu and then 
choose Browse IGMP Status. Thefol lowing screen appears: 



IP Multicast Information 



Age-out Timer: 300 VLAH: 



J 



IGMP Snooping: Disabled 
Queries (TX): 0 
Queries (RX) : 0 
Multicast Group: 
MAC Address: 
Reports : 
Ports : 



******************************************************************* 
Message Area: 

Esc = Previous screen CTPL+P = Refresh N - Next Page P - Previous Page 

















Figure 6-61. IP Multicast Information screen 

This screen displays the number of I GM P queries and reports for each active I P multicast group detected by the Switch. 
You can also view which Switch ports support each multicast group. 

Thefi elds displayed are defined as follows: 

♦ IGMP Snooping Indicates whether IGMP snooping isEnabled or Disabled. 

♦ Age-out Timer DisplaysthetimetheSwitch waits between IGMP queries. 

♦ VLAN The selected VL AN. 

♦ Multicast Group TheMulticast IP addressoftheMulticastgroupbeingdisplayed. 

♦ MAC Address TheMulticast MAC address of the multicast group being displayed. 
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♦ Queries(TX) Thenumberaf I GMP requests sent by the Switch. 

♦ Queries(RX) The number of I GMP requeststhathavearrivedataSwitch port. 

♦ Reports The number of notifications sent from each station tothe I GMP host, signifying that the station isstill 
(or wants to be) part of a multicast group. 

♦ Ports The Switch ports supporting the selected multicast group. 
Browse GVRP Status 

The Browse GVRP Status function allows you to browse GARP (Generic Attribute Registration Protocol) VLAN 
Registration Protocol (GVRP). 



Todisplay the GVRP Status screen, choose Network Monitoring from the main menu and then choose Browse 
GVRP Status. The following screen appears: 



G-VPP Status 

Number of IEEE 802.10. VLAN: 2 
IEEE 802.10 VLAN ID: 1 

Current Egress Ports: 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 

11, 12, 13, 14, IS, 16, 17, 18, 19, 20, 
21, 22,S1P1,S1P2,S2P1 

Current Untagged Ports: 1, 2, 3, 4, E, 6, 7, 3, 9, 10, 



Status: Permanent 

Creation time since switch power up: 54:08:33 



******************************************************************************* 
Hess age Area: 

Esc = Previous screen CTR.L + P = Refresh N - Next Page P - Previous Page _ 



Connected 5:30:57 



VT100 



9600 S-N-1 



NUM 



Figure 6-62. GVRP Status screen 

This screen contains information pertaining toGVRP status. 

Browse GMRP Status 

TheBrowse GMRP Status function allows you to browseGroup Multicast Registration Protocol (GMRP). 
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Todisplay the GMRP Status screen, choose Network Monitoring from the main menu and then choose Browse 
GMRP Status. Thefollowing screen appears: 



G-MP.P Status 

Number of multicast entries: 0 
IEEE 802. 1Q VLAN ID: 
Current Egress Ports: 

Current Learned. Ports: 



HAC Address: 



****************************************************************************** 
Message Area: 

I Esc = Previous screen CTRL + R. = Refresh N - Next Page P - Previous Page 



ted 5:31:54 |VT100 



|~N 



' rF" 



Figure 6-63. GMRP Status screen 

Thisscreen displays various pieces of information relating toGMRP status. 



Switch History 

TheNetwork Monitoring menu allows the user to view the Switch history. This works like a trap and event receiver 
except it only captures trap/events generated by the Switch itself. For example, the switch history includes when the 
system is rebooted, when a console session is timed out, when a new link is established, and when configuration is save to 
flash memory. 

Todisplay theSwitch History screen, choose Network Monitoring from the main menu and then choose Switch 
History. Thefollowing screen appears: 
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Switch History 



Seq . # Time 



Log Test 



268 000d04h28m 

267 000d03h55m 

266 000d03h31m 

265 000d03hl8m 

264 000d02h56m 

263 000d02h48m 

262 000d02h22m 

261 000d01h54m 

260 000d01h47m 

259 000d01h30m 

258 000d01h30m 

257 OOOdOlhOSm 
MORE (12 of 268) 



Successful login through console, 
console session time out .... 
Successful login through console, 
console session time out .... 
Configuration saved to flash. 
Successful login through console, 
console session time out .... 
Successful login through console, 
console session time out .... 
Successful login through console, 
console session time out .... 
Successful login through console. 



******************************************************************************* 

Message Area : 

View Switch Logs and Health Status 



H = Page Dn P = Page Up B = Begin E = End C = Clear Lo 



CTRL+R = Re f res. 



|Connected 4:51:05 |VT100 |9G00 S-N-1 



Figure 6-64. Switch History screen 



The switch history entries are listed sequentially from the last time the Switch was rebooted. Usethefol lowing keys to 
move around the screen above: N - Pagedown, P - Page up, B - Begin, E - End, andC - Clear Log. CTRL4R will refresh 
the screen. 



Resetting the Switch 



You can use the console i nterface to reset the Switch, either performi ng a Restart System (which restarts the Switch 
and is identical to powering the Switch off and on again), or a Factory Reset (which sets all of the Switch's parameters 
to what they were when the Switch was purchased). 



Restart System 

To perform a system reset, chooseRestart System from the main menu-a confirmation query will be offered before the 
system is rebooted. 
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Reboot Switch H 


Please wait, the switch is rebooting. . . 









Figure 6-65. Restart System screen 



Factory Reset 

Before performing a factory reset, be absolutely certain that this is what you want to do. Once the factory reset is done, all 
of the Switch's settings stored in NV-RAM (induding TCP/IP parameters, SNMP parameters, the enabled/disabled 
settings of ports, security settings, etc) will be erased and restored to values present when the switch was purchased. 

After performi ng the factory reset, make sure to redefine the IP settings for the Switch in the Configure IP Address 
menu. Then perform a Restart System on the Switch. After these three procedures are performed, your factory reset is 
complete. 

ChooseFactory Reset from the main menu. The following screen appears: 
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A I 



Factory Reset 



CAUTION! This function, resets the HV-RAM to default values. 

All changes made to settings since the switch was purchase will be erased. 
Make sure to set the Restart Settings in the IP Configuration screen 
after applying the Factory Reset and before Rebooting. 

Are you sure you want to pr oceed with the factory reset? 
Ho 



******************************************************************************* 



Message Area : 



CTRL+T=Root screen 



Esc=Prev . screen 



CTRL+R = Refres 



Connected 5:00:31 |VT100 |9G00 8-N-1 



Q 



Figure 6-66. Factory Reset 



Logout 

Toexittheconsoleprogram, choc6e Logout from the main menu. Makesureyou have performed a Save Changes if you 
have made changes to the settings and wish them to become defaults for the Switch. After logging out, you will be returned 
to the opening login screen. 
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7 



Web- Based Network Management 



Introduction 



TheDES-3225G offers an embedded Web-based (HTML) interface allowing users to manage the Switch from anywhere on 
the network through a standard browser, such as Netscape Navigator/ Communicator or M icrosoft I nternet Explorer. The 
Web browser acts as a universal access tool and can communicate directly with the Switch using the HTTP protocol. Your 
browser window may vary with thescreen shots (pictures) in this guide. 

The Web-based management module and the Console program (and Telnet) are different ways to access the same internal 
switching software and configure it. Thus, all settings encountered in Web-based management are the same as those found 
in the console program. 

Note: This Web-based Management Moduledoes not accept Chinese language input (or other languages requiring 
2 bytes per character). 



Getting Started 



The first step in getting started in using Web-based management for your Switch is to secure a browser. A Web browser is 
a program which allows a person to read hypertext, for example, Netscape Navigator or M icrosoft I nternet Explorer. Follow 
the i nstal lation i nstructions for the browser. 

The second and last step istoconfigurethelP interface of the Switch. This should be done manually through a console (see 
the Configure I P Address section in the "Using The Console I nterface" chapter). 



Management 

To begin managing your Switch simply run the browser you have installed on your computer and point it to the I P address 
you have defined fa the device The URL in the address bar should read something like: http://123.123.123.123, where the 
numbers 123 represent the I P address of the switch. 

I n the page that opens, dick on theLogin to DES-3225G Web-based Management button: 



Login Lo DE.S -32 Web -based ftfarragemerrt 



This opens the mai n page i n the management module. 

The top of the main page has a button labeledClick Hereto Load Panel: 
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iy MkrWay Ethernet Switch *J \ J 

Clicking on this button causes an interactive view of the Switch's front panel to be shown in the top portion of the window. 
Clicking on oneofthe Pats opens a configuration window fa that particular port. 

The main pagecoitains a list of buttons along the top of it labeled: Configure Switch, Configure Management, 
Monitor, Reset and Update Save Changes, and Help. These are the maja categaies fa Switch management. 
CI icking or\ one of thefirst four categaies causes a list of options to appear in the left panel of the main window. 

The switch management features available in the Web-based are explained below. 

Configure Switch 

This first category includes: IP Settings, Port Settings, Port Mirroring, Switch Settings (Basic and 
Advanced), Filtering and Forwarding Table (Configure Static Forwarding Table, MAC Address 
Filtering and Static Multicast Forwarding), Spanning Tree (STP Parameter and STP Parameter & 
Port Settings), IGMP Filtering (IGMP Settings and Configure 802.1Q IGMP), VLANs & MAC -based 
Broadcast Domains (Configure VLANs & MAC -based Broadcast Domains, Configure IEEE 802. 1Q 
VLANs, and Configure GMRP), and Trunk, as well as a number of related windows. 



Web-Based Network Management 
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IP Settings 



File Edit View Go Communicator .Help 



€ ^ & £l 

Back Reload Home Search Netscape 



i£ m ii 

Security Shop 



^"Bookmarks & Location: jhttp7AI 0.5.2.241 /html/H main, html 



~Z\ {fX What's Related 



$ Instant Message J WebMail 9 Contact [§ People J Yellow Pages [§ Download J Find Sites £j Channels 





Configure ; Confignre 



Switch 



Management ' 



Monitor \ 



Settings 



: Document: Done 



Reset and \ Save 
Update Changes 



Help 



Current Assign IP is Manual 
Current IP Address 10 5 2 241 

Current Subnet Mask 255 0 0 0 
Current Default Gateway 10 254 254 254 



Assign IP is | Manual 



MAC Address 



Subnet Mask 



Default Gateway 



00-80-C8-09-28-24 



10.5.2 .241 



|2SS. 0.0.0 



10.254.254.254 



Figure 7-1 . IP Settings window 



IP Settings 

Port Setting: 

Port Mirroring 

Switch Setting: 

Filtering and 
Forwarding Table 

Spanning Tree 

IGMP Filtering 

VLANs & MAC- base 
Broadcast Domains 

TRUNK 



This window is used to determine whether the Switch should get its IP Address settings from the user Manual), a 
BOOTP server, or a DHCP server. If you are not using either BOOTP or DHCP, enter the IP Address, Subnet Mask, 
and Default Gateway of the Switch. If you enable BOOTP, you do not need to configure any I P parameters because a 
BOOTP server automatically assigns IP configuration parameters to the Switch. If you enable DHCP, a Dynamic Host 
Configuration Protocol request will be sent when the Switch is powered up. Once you have selected a setting under Assign 
I P is, cl ick Apply to activate the new setti ngs. 

The i nformation is descri bed as fol lows: 

♦ Assign IP is There are three choices for how the Switch receives its IP Address setti ngs: Manual, BOOTP, and 
DHCP. 

♦ MAC Address TheEthernetaddressforthedevice. Alsoknown asthephysical address 

♦ I P Address The host address for the device on theTCP/l P network. 

♦ Subnet Mask The address mask that controls subnetting on your TCP/IP network. 

♦ Default Gateway The I P address of the device, usually a router, that handles connections to other subnets 
and/or other TCP/I P networks. 
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Figure 7-2. Port Settings window 



Select the port you want to configure by clicking on the port in the Switch front panel display at the top of the window. 
Follow these steps: 

L Enable or disable the port. If you choose Disabled, devices connected to that port cannot use the Switch, and the 
Switch purges their addresses from its address table after the MAC address aging time elapses. The Switch 
won't purge addresses if you define them as permanent entries in the MAC Forwarding Table 

2. Configure the Speed/Duplex setting for the port. Select Auto-Negotiate to allow the port to select the best 
transmission speed, duplex mode and flow control settings based on the capabilities of the device at the other 
end. The other selections allow you to face the port to operate in thespedfied manner. Select 100Mbps/ Full for 
port operation at 100 Mbps and full duplex. Select 100Mbps/ Half for port operation at 100 Mbps and half 
duplex. Select 10Mbps/ Full fa pat operatia at 10 Mbps and full duplex. Select 10Mbps/ Half fa pat 
operatia at 10 Mbps and half duplex. 

3. Cafigure the Flow Control setting fa the pat. Selecting Enabled in full-duplex mode will implement IEEE 
802.3xflow ooitrd. Selecting Enabled when the port is in half-duplex mode will implement namal Ethernet 
collisia-based backpressure flow ooitrol. Select Disabled fa no flow oaitrol. Also, if the pat is set fa Auto 
(NWay) in the speed/duplex field above and flow oaitrol is enabled, flow oaitrol (whether full- a half-duplex) will 
aly be implemented if the rther device can auto-negrtiate flow control. Nrte that you must reboot the Switch 
befaea flow coitrol change can take effect. 
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4 Configure the Priority Queues setting fa packets passing through this port, using IEEE 802.1 tagging. Select 
Low, High a Normal. If the network is congested, the Switch handles packets with a higher priority before those 
with lower priority. 

5. Configure the Port Lock setting to prevent the port from learning MAC addresses of new hosts. This will help 
keep intruders off your network si nee any packet coming from an unknown source will be dropped by the Switch, 
that is, not added to your MAC Address Forwarding Table. Select Enabled a Disabled. 

6. Configure the Broadcast Storm Rising Action setting from three choices: Do Nothing, Blocking, or 
Blocking-Trap and the Broadcast Storm Rising Action Threshold that will trigger a Broadcast Storm 
Rising Action. 

7. Configure the Broadcast Storm Falling Action setting from three choices: Do Nothing, Forwarding, or 
Forwarding-Trap and the Broadcast Storm Falling Action Threshold that will trigger a Broadcast 
Storm Falling Action. 

8. TheSTP Port State read-only field indicates thestatus of the SpanningTree Protocol, eg. Forwarding. 

9. Click Apply to let your changes takeeffect. 

To see all the ports on the Switch rather than just an individual port, click View All Ports at the bottom of the 
window. 
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Figure 7-3. Port Mirroring window 
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The Switch allows you to copy frames transmitted and received on a port and redirect the copies to another port. You can 
attach a monitoring device to the mirrored port, such as a sniffer or an RMON probe, to view details about the packets 
passing through the first port. 

To configure a mirror port, select Enabled from the Port mirroring in pull-down list. In the next field, select the 
Source Port from where you want to copy frames. I n the last field, select the Target Port, which receives the copies 
from the source port. This is the port where you will connect a monitoring/troubleshooting device such as a sniffer or an 
RMON probe Click Apply to let the changes take effect. 

Note: You cannot mirror a fast port onto a slower port. Fa example, if you try to mirror the traffic from a 100 M bps 
port onto a 10 M bps port, this can cause throughput problems. The port you are copying frames from should 
always support an equal or lower speed than the port to which you are sending the copies. Also, the target 
port for the mirroring cannot bea member of a trunk group. Please notea target port and a source port can 
not be the same port. 
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Figure 7-4. Switch Settings - Basic window 



To set basic switch settings, enter a Switch Name in the first field, the physical location of the Switch in the Location 
field, and the name of the contact person responsible for the Switch in the Contact field. Then click Apply. 
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The i information is descri bed as fol lows: 

♦ Switch Name A user-assigned name for the Switch. 

♦ Location A user-assigned description for the physical location of the Switch. 

♦ Contact Name of the person to contact should there be any problems or questions with the system. You may 
also want to i ndudea phone number a extension. 

♦ Description A description of the Switch type. 

♦ MAC Address TheEthernetaddressforthedevice. 

♦ PROM version Version number for the firmware chip. This information is needed for new runtime software 
downloads. 

♦ Firmware version Version number of the firmware installed on the Switch. This can beupdated byusingthe 
Update Firmware window in the Reset and Update section. 

♦ Hardware version Version number of theSwitch's hardware. 

♦ Slot 1 Description of module plugged intoslot ljocatedon thefront-of theSwitch. 

♦ Slot 2 Description of module plugged intoslot 2, located on therear of theSwitch. 
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Figure 7-5. Switch Settings - Advanced window 
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The first setting allows you to enable or disable port auto-partitioning by the Port Auto-Partition Capability on 
All ports function. If you enable auto-partitioning on all ports, when more than 63 collisions occur while a port is 
transmitting data, the port automatically stops transmissions. The second setting allows you to enable or disable the 
Head of Line (HOL) Blocking Prevention function, which is designed to prevent forwarding a packet toa "blocking" 
port. Click Apply to let your changes take effect. 

The i nformation i n the wi ndow is descri bed as fol lows: 

♦ Port Auto-Partition Capability on All ports This option offers Enabled or Disabled todedde whether 
to auto-partition a selected port and take it offline or not. 

♦ Head of Line (HOL) Blocking Prevention Thisoption prevents forwarding a packettoa port wherean 
excess of packets arequeued up. Notethat when a multicast packet or a packet with an unknown destination 
address needs to be forwarded to several ports, and if sormeof them are "blocking," the packet will not be 
discarded, rather it will beforwardedonly tothe ports that are not "blocking." 

Filtering and Forwarding Table 

When a packet hits the Switch, it looks in the filtering and forwarding table to decide what to do with the packet; either to 
filter it off the network, or to forward it through the port on which its destination lies. 
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Figure 7-6. Configure window 
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This window allows you to stop or start address learning, use an address look-up mode, and select an age-out time of the 
MAC address in the selected address table. Click Apply to let your changes takeeffect. 

The following fields abovecan beset: 

♦ Lock Address Table (Stops learning new address) Mostly used fa security purposes, when the forwarding 
table is locked the Switch will no longer learn the MAC addresses for new hosts. If your network configuration doesn't 
change, locking the forwarding table helps keep intruders off your network since any packet coming from an unknown 
source address will be dropped by the Switch. 

♦ Address Look-up Mode Select from: Level 0, Level X Level 2, Level 3, Level 4, Level 5, Level £> a Level 7. 
Reboot the Switch to al low the new setti ng to take effect. 

♦ MAC Address Aging Enter the desired MAC address age-out time in this field (10 to 1000000 seconds). 
Static Forwarding Table 
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Figure 7-7. Static Forwarding Table window 



Static forwarding allows the Switch to permanently forward outbound traffic to specific destination MAC addresses over a 
specified pat. 

Click the pointer icon on the right side of the table to access the Add/Modify Static Forwarding Table Entry 

window: 
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Add / Modify Static Forwarding Table Entry 



F Add / Modify to the table 
Delete from the table 

Note: If you modify the MAC Address item, it will add a new entry to the table. It will 
not replace the entry that you originally selected. 
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Figure 7-8. Add/Modify Static Forwarding Table Entry window 



To use the static forwarding function, check either the Add/Modify to the tableoption button or the Delete from the 
table option button, enter the MAC address of the device to which thespedfied port permanently forwards traffic in the 
Destination MAC Address field, enter a VLAN ID number in the second field, and enter the port number that 
permanentlyfawardstrafficfromthespecifieddeviceinthe Destination Port Number field. Then dick Apply. 

The i nformation i n the wi ndow is descri bed as fd lows: 

♦ Add/Modify to the table/Delete from the table Choose one d the desired options to add/modify or 
ddetean entry from the table. 

♦ Destination MAC Address The MAC address d the device to which the specified port permanently 
forwards traffic. 

♦ Vid (1 .. 4094) This is the VLAN I D number fa the VLAN that has an agent attached to it which enables 
IGMP packets to be sent and received. 

♦ Destination Port Number The pat number that pamanently fawards traffic fron the specified device, 
regardless d the device's network activity or current network congestion. 
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MAC Address Filtering 
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Figure 7-9. MAC Address Filtering Table window 



MAC address filtering allows you to designate MAC addresses and VLANs which will be filtered from sending packets to 
the Switch. Please note that when a mode other than IEEE 802.1Q VLANs is selected, the only column that will appear on 
thetable above is MAC Address. 

Click the pointer icon on the right sideof thetabletoaccess the Add/Modify MAC Address Filtering Table Entry 

window: 
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Add / Modify MAC Address filtering Table Entry 



F Add / Modify to the table 
Delete from the table 

Note: If you modify the MAC Address item, it will add a new entry to the table. It will 
not replace the entry that you originally selected. 
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Figure 7-10. Add/Modify MAC Address Filtering Table Entry window 



To use the MAC address filtering function, check either the Add/Modify to the table option button or the Delete 
from the table option button, enter the MAC address and the VLAN I D of the device being filtered in the two fields 
offered (the Vid (1..4094) field will only be displayed when the IEEE 802.1Q VLANs mode has been selected), and then 
click Apply. 

The information above is described as follows: 

♦ Add/Modify to the table/Delete from the table Choose one of the desired options to add, modify, or 
deletean entry from the MAC Address Filtering Table 

♦ MAC Address The Ethernet address of the MAC Address Filtering Tableentry. 

♦ Vid (1 .. 4094) This is the VLAN I D number fa the VLAN that has an agent attached to it which enables 
IGMP packets to be sent and received. 
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Static Multicast Forwarding 
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Figure 7-11. Static Multicast Forwarding Table window 



This function forwards traffic over each port for one multicast group. You can configure each port on the Switch to forward 
trafficfor the specified multicast group. 



Click the pointer icon on the right side of the table to access the Add / Modify Static Multicast Forwarding 
Table Entry window shown below: 
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Figure 7-12. Add / Modify Static Multicast Forwarding Table Entry window 
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To Add / Modify to the table or Delete from the table check the desired option button, enter the MAC address in 
theMAC Address field, enter the VL AN ID in the Vid field (if IEEE 802.1Q VLANS is selected), enable a disable the 
Allow dynamic updates via IGMP Snooping function, and select Block a Forward for each port. Click Apply to 
let the changes take effect. 

The information above is described as follows: 

♦ Add/Modify to the table Allows you to create or edit a filter for the Static Multicast Forwarding 

Table which will either forward or block multicast traffic. 

♦ Delete from the table Allows you to delete a filter from the Static Multicast Forwarding Table 

♦ MAC Address The Ethernet address of the Static Multicast Forwarding Table entry. Only valid 
M ulticast addresses wil I be added to the table. 

♦ Vid ThisistheVLAN thatwill bedefined on this screen. NoteaVLAN ID is from 1 to 4094. 

♦ Allow dynamic updates via IGMP Snooping Enablethis function to tell theswitch howtodeal with the 
newly-created Static Multicast F awarding table entry. 

♦ Port Choose Block a Forward for each individual port. 
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Spanning Tree 

The Switch supports 801.2d Spanning Tree Protocol, which allows you to create alternative paths (with multiple switches 
or other types of bridges) in your network. See the Spanning Tree Algorithm section of the Switch Management 
Concepts" chapter for a detailed explanation. 



STP Parameter 



Bj[ Netscape 








File Edit View Go 


Communicator Help 






Back 


s <a & e* 

Reload Home Search Netscape Print 


<£ m m 

Security Shop 




"^Jf Bookmarks 


jfu Location: | http: in 0. 5. 2. 241 /html/H main, html 




Z\ ^'What's Related 


Instant Message 


g WebMail g Contact g People g Yellow Pa 


ges Download [j^l Find Sites Qj Channels 






Spanning Tree Protocol Status: Disabled 
Time Since Last Topology Change:0 seconds 
Topology Change Count:0 

Root Information 



MAC Address 


00-00-00-00-00-00 


Path Cost 


0 


Port 


0 


Priority 


0 



Other Information 



Document: Di 





D-Link 

Building Networks for People 



IP Settings 

Port Settings 

Port Mirroring 

Switch Setting: 

Filtering and 
Forwarding Table 

Spanning Tree 

- STP Parameter 

- STP Parameter 
& Port Settings 

IGMP Filtering 

VLANs & MAC- base 
Broadcast Domains 

TRUNK 




Figure 7-13. Advanced - Spanning Tree Protocol window 



The information above is described as follows: 

♦ Spanning Tree Protocol Status Displays the current Spanning Tree Protocol setting. 

♦ Time Since Last Topology Change Displays the last time changes were made to the network topology. These 
changes usually occur when backup paths are activated due to primary path failures. 

♦ Topology Change Count Displays the number of times (since the current management session with the device 
was started) changes were made to the network topology. Changes usually occur on the network when backup paths are 
activated. 

♦ MAC Address Displays the MAC addressof theswitch acti ng as the root bridge. 

♦ Path Cost Displays thecost for the path between theSwitch andthercot bridge. If theSwitch isthercot bridge, then 
the path cost is zero. 
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♦ Port Displays the port (on theswitch) that offers the least path cost from the bridgeto the root bridge Intheeventof 
a network loop, data packets wi 1 1 pass through the port spedfied here. 

♦ Priority Displays the priority number of the root bridge in the Spanning Tree. The value is used in conjunction with 
the bridge MAC address to set the bridge I D, which in turn is used in determining the root bridge of a multi-bridged 
network. The root bridge is responsible fa processing data packets when network loops occur. The smaller the number 
set, the higher the bridge priority is. The higher the bridge priority, the morechances the bridge has of becomi ng the root 
bridge. A bridge priority ranges from 0 to 65535, with 0 being the highest priority. 

♦ Switch Priority This is a read-only object that containing values from 0 to 65535. This value can be set in the 
Bridge Priority field and is the priority number of the bridge. The value is used in conjunction with the bridge MAC 
address to set the bridge I D, which in turn is used when determining the root bridge of a multi-bridged network. The 
root bridge is responsible for processing data packets when network loops occur. The smaller the number set, the higher 
the bridge priority is. The higher the bridge priority, the more chance the bridge has of becomi ng the root bridge Zero is 
the highest priority. 

♦ Hello Time Displays the interval between two transmissions of BPDU packets sent by the root bridge to tell all 
other switches that it is i ndeed the root bridge. 

♦ Max Age Read-only object indicates the maximum age of STP information learned from the network (on any pat) 
befaeit is discarded. 

♦ Forward Delay Displays the time any pat ai the Switch spends in the listening state while moving from the 
blaki ng state to the fawardi ng state. 
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Figure 7-14. STP Parameter & Port Control window 



ToconfigureSpanningTreeProtocol functions for the Switch or individual ports, enter the desired information in the fields 
on this window (see the descriptions below for assistance) and then click Apply. 



The information on the window isdescribed as follows: 



♦ Spanning Tree Protocol (STP) for all ports is Thisoption offers Disabled or Enabled toimplement 
the Spanni ng Tree Protocol . 

♦ Bridge Priority: (0 .. 65535)/Priority A Bridge Priority can be from 0 to 65535. Zero is equal to the highest 
Bridge Priority. 

♦ Hello Time: (1 . . 10 sec) TheHelloTimecan befrom 1 to 10 seconds. This istheinterval between two 
transmissions of BPDU packets sent bytheRoot Bridge to tell all other switches that it is indeed the Root 
Bridge. If you set a HelloTimefor your Switch, and it isnottheRoot Bridge, theset HelloTimewill be used if 
and when your Switch becomes the Root Bridge. 

♦ Forward Delay: (4 .. 30 sec) TheForward Delay can be from 4 to 30 seconds. This isthetimeany port on 
theSwitch spends in thelistening state whilemoving from the blocking state to the forwarding state. 

♦ Maximum Age: (6 . . 40 sec) The Maximum Age can be from 6 to 40 seconds. At the end of the Maximum 
Age if a BPDU has still not been received from the Root ridge, your Switch will start sending its own BPDU toall 
other switches for permission to become the Root Bridge If it turns out that your Switch has the lowest Bridge 
Identifier, it will become the Root Bridge. 
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♦ STP State TheSpanningTreeProtocol statefor a selected port can either beEnabled a Disabled. 

♦ Cost The Path Cost is a read-only parameter. The 100Mbps segment has an assigned Path Cost of 19, and each 
10M bps segment has an assigned Path Cost of 100. 

♦ Priority Pat Priority is a read-write object that can be set from 0 to 255. This is the priority number of the 
port. The lower the pat priaity, the maechancethe bridge has of becoming the root pat. Zero is the highest 
priaity. 
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Figure 7-15. IGMP Settings window 



Internet Group Management Prrtocol (IGMP) snooping allows the Switch to recognize IGMP quaies and reports sent 
between netwak statias a devices and an IGMP host. When enabled fa IGMP snooping, the Switch can open a closea 
port toa spedficdevice based on IGMP messages passing through theswitch. 

To configure the IGMP, enter a value between 30 and 9999 seconds in the IP Multicast Filtering Age-out Timer 
field and then change the IP Multicast Filtering (IGMP Snooping) setting from Disable to Enable. Click the 
Apply button to let the changes take effect. 

Items in the above window are described as follows: 
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♦ I P Multicast Filtering Age-out Timer When this timer elapses, the switch itself will try to become the 
IGMPhost. 

♦ IP Multicast Filtering (I GMP Snooping) This setting allows the switch to learn the I GMP spanning tree 
and intelligently forward packets (as opposed to broadcasting all packets). IGMP snooping is automatically 
enabled/disabled with this setting. 
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Figure 7-16. IGMP Configuration window 

Click the icon on the far right to access the Add/Delete IGMP Entry window: 
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Figure 7-17. Add/Delete IGMP Entry window 



To Add/Modify to the table or Delete from the table check the desired option button, enter a value from 1 to 4094 
in the VLAN ID field, enter a value between 30 and 9999 in the Age-out Timer field, enable or disable the IGMP 
Status control, and then dick Apply. 

The information above is described as follows: 

♦ Add/Modify to the table Allowsyoutocreateoreditanentryforthetable. 

♦ Delete from the table Allows you todeletean IGMP entry from the table. 

♦ VLAN ID This isthe VLAN that will bedefined on thisscreen. Notea VLAN I D is from 1 to 4094. 

♦ Age-out Timer Specifiesthetimein seconds the switch will wait before trying to host IGMP ontheVLAN. 

♦ IGMP Status Enables/disables IGMP on this VLAN. Up to 12 VLANs can be enabled to handle IGMP 
packets at any oneti me. 



VLANs & MAC-based Broadcast Domains 

This section allows you to create Port-based VLANs, IEEE 802.1Q VLANs, and MAC-based Broadcast Domains. If unsure 
about this material, please consult Chapter 5, "Switch Management Concepts." 
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Figure 7-18. Configure VLANs & MAC-based Broadcast Domains window 



To configure VLAN sand MAC-based Broadcast Domains, select MAC-based Broadcast Domains, I EEE 802.1Q 
VLANs, or Port-based VLAN underRestart Mode-otherwise, leave the setting at None. Then spedfytheVLAN ID 
number in the Management Vid (1.. 4094) field and click Apply. 

The information above is described as follows: 

♦ Restart Mode Choosefromfoursettingsfathismode: MAC-based Broadcast Domains, Port-based VLAN, 
IEEE 802.1Q VLANs, or None. 

♦ Management Vid (1..4094) WhenlEEE 802.1Q VLANs or Port-based VLAN areenabled, this isthe VLAN 
that will be used for management packets. Makesuretheswitch port that the management station is connected to has 
thisPVID number and is a member of this 802.1Q VLAN (VI D). This should be the first VLAN you create, otherwise, 
you may not be able to communicate with the Switch except through the console port. 
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Figure 7-19. Default Port VLAN Assignment window 



Use this window to assign a Pat VLAN ID (PVID) number for each port. Click Apply to let the settings take effect. 
Please notethat this function only applies to I EEE 802.1Q VLANs mode. 
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Figure 7-20. Ingress Filtering Check window 



U sethis window to enable or disablethe ingress filtering check for each desired port. Ingress filtering means that a 
receiving port will check to see if it is a member of the VLAN I D in the packet before forwarding the packet. Click Apply 
to I et the setti ngs ta ke effect. P I ease note that this f u ncti on on I y a ppl i es to IEEE 802 . 1Q V L A N s mode. 
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Figure 7-21. Configure IEEE 802.1 Q VLANs window 



Please notethat this function only applies to I EEE 802.1Q VLANs mode. 

Click the pointer icon on the right side to access theConfigure IEEE 802. 1Q VLANs Entry window: 
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Figure 7-22. Configure IEEE 802.1 Q VLANs Entry window 



Toconfigurean 802.1Q VLAN entry, check the desired option in the fi rst two lines of the window abcve and enter a V-ld 
number and Description. Next, either check the Untag option, or leave it unchecked fa each member port you wish tobea 
Tagging port. In the bottom three lines, Noneshould be checked if you don't want a port to belong to the VLAN. 
Otherwise, check Egress to statically set a port to belong toa VLAN or check Forbidden if you wish to forbid the port from 
dynamically belonging tothe VLAN. Click Apply to let the changes takeeffect. Please note that this function only applies 
to I E E E 802.1Q VLAN s mode 
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Figure 7-23. GVRP Configuration window 



This window allows you to enable or disable GARP VLAN Registration Protocol (GVRP), where GARP istheGeneric 
Attribute Registration Protocol, on individual ports. 

GVRP updates dynamic VLAN registration entries and communicates the new VLAN information across the network. 
This allows, among other things, for stations to physically move to other switch ports and keep their same VLAN settings, 
without having to reconfigure VLAN settings on the Switch. 
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Figure 7-24. GMRP Configuration window 

This window allows you toeither enable or disable GMRP on a specific port. PressAPPLY to let your changes takeeffect. 
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Figure 7-25. Configure Port Trunking window 

The Switch supports up to3 trunk groups. Trunks aregroups of ports that are banded together to form a single, logical, 
high-bandwidth data pipe. 

I terns i n the above wi ndow are def i ned as fol I ows: 

♦ Name The user-assigned nameof thetrunk group. 

♦ Trunk Ports Thecontinuous number of ports that will be members of thetrunk group. 

♦ Master The Master port for thetrunk group. All configuration settings changes madetothe master port will 
automatically be made to the other ports in thetrunk. 

♦ Status Enables a disables the trunk group. 

Configure Management 

This second category indudes: Traps and Community Strings, User Accounts, and Console Port Settings. 
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Figure 7-26. Traps and Community Strings window 



To use the functions on this window, enter the appropriate SN MP information in the Community Strings and Trap 
Receiving Stations sections-you may enter up to four entries in each section. A trap receiving station is a device that 
constantly runs a network management application to receive and storetraps. Then click Apply to put the settings 
into effect. 

The Community Strings information isdescribed as follows: 

♦ SNMP Community String A user-defined SN MP community name. 

♦ Access Right The permitted access of Read-Only or Read-Write using the SNMP community name. 

♦ Status Option tosetthecurrent community stringto Valid a Invalid. 
TheTrap Receiving Stations information is described as follows: 

♦ IP Address The IP address of thetrap receiving station. 

♦ Status OptiontosetthetrapreceivingstationtoEnabled orDisabled. 

♦ Community String A user-defined SNMP community name. 
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Figure 7-27. first User Accounts window 

Click the pointer icon on the right side to access the main User Accounts window: 
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Figure 7-28. second User Accounts window 



Trap: and 
Commnnity String: 

User Accounts 

Console Port 
Setting: 



To add or delete a User Account, fill in theappropriateinfamation in the User Name, Old Password, New Password, 
and Confirm New Password fields. Then select the desired access, Normal User a Administrator in the Access 
Level control and dick Apply. 
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Current Console Port Setting is Console 
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Note: You need to reboot the switch for console port settings to take effect. 
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Figure 7-29. Console Port Settings window 



This window allows you to select the protocol for communicating through the console port, Consoleor SLI P, in the 
Port Setting field. Use SLIP for out-of-band management. You can also choose the refresh rate in the Console 
Time Outfield (2 minutes, 5 minutes, 10 minutes, 15 minutes a Never). If SLIP is being used, you may also set 
the Baud Rate in the last field. Click Apply and then reboot the Switch for console port settings to take effect. 

The default serial port settings are: 

Baud Rate=9600 

Data Bits=8 

Flow Control =X on/X off 

Parity =N one 

StopBits=l 

The i nformation is descri bed as fol lows: 

♦ Port Settings TheoptionsforthecurrentconsoleportsettingareConsoleorSLI P. 

♦ Console Time Out ChooseNever, 2 minutes, 5 minutes, 10 minutes, a 15 minutes for the desired refresh 
setting. 



Web-Based Network Management 



127 



24-port NWay Ethernet Switch User's Guide 



♦ Baud Rate Determines the serial port bit rate that will be used the next time the Switch is restarted. Applies 
only when the serial pat is being used for out-of-band (SLIP) management; it does not apply when the pat is used 
fa the oaisole pat. Avai lable speeds are 2400, 9600, 19,200 and 38,400 bits per seooid. The default setti ng i n this 
Switch versia is 9600. 

Monitor 

This third categay includes: Switch Overview, Port Statistics (Traffic, Errors, Packet Analysis, and 
Utilization), Browse Address Table, Browse IGMP Status, Browse GVRP Status, Browse GMRP 
Status, and Switch History. 
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Figure 7-30. Switch Statistics window 

The i nformation is descri bed as fol lows: 

♦ Update Interval Choose the desired setting: 2 seconds, 5 seconds, 15 seconds, 30 seconds, 60 seconds a 
Suspend. 

♦ Port The selected port to be monitored. 

♦ TX frames/sec Counts the total number of frames transmitted from a selected port per second since the 
Switch was last rebooted. 



♦ RX frames/sec Counts all valid frames received on the port per second si nee the Switch was last rebooted. 
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♦ %of Utilization This shows the percentageof available bandwidth each port is using ever the amount of time 
specified by the update interval. For example, when a 10 M bps port is relaying packets at 5 Mbps, the utilization 
is 50%. 

Port Statistics 

The port statistics shown by default are those for the pat you last configured. Once in the Port Statistics windows, 
you can click any portcntheswitch graphictoshow statistics for that port. Click theReset Counter button at the 
bottom of the wi ndow to clear the cou nters. 
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Figure 7-31. Port Statistics - Traffic window 



The i nformation is descri bed as fol lows: 

♦ Link Status Indicates whether the port is online and waking (On) or not (Off). 

♦ Utilization Current utilization fortheport, asa percentageof total available bandwidth. 

♦ Last Screen MAC The MAC address of the most recent screen. 
Traffic in Bytes: 

♦ Bytes Sent Counts the number of bytes successfully sent from the port. 

♦ Bytes Received Counts thetotal number of bytes (octets) included in valid (readable) frames. 

♦ Total Bytes Received Counts thetotal number of bytes received on the port, whether in valid or invalid 
frames. 
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Traffic in Frames: 

♦ Frames Sent Counts the total number of frames transmitted from the port. 

♦ Frames Received Counts all valid frames received on the port. 

♦ Total Frames Received Counts the number of frames received on the port, whether they were valid or not. 
Errors 
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Figure 7-32. Port Statistics - Errors window 

The i nformation is descri bed as fol lows: 

♦ Update Interval Choose the desired setting: 2 seconds, 5 seconds, 15 seconds, 30 seconds, 60 seconds or 
Suspend. 

♦ Link (Speed/Duplex/Flow Control) I ndicates the current link status. 
Other errors: 

♦ CRC Error Counts otherwisevalidframesthat did not end on a byte(octet) boundary. 

♦ Oversize Frames Counts packets received that were longer than 1536 octets (excluding framing bits, but 
i nd udi ng F CS octets) and were otherwise wel I formed. 

♦ Fragments The number of packets less than 64 bytes with either bad framing or an invalid CRC. These are 
normal ly the result of col I isions. 

♦ J abber The number of frames with length more than 1536 bytes and with CRC error or misalignment (bad 
framing). 
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♦ Late Collision Counts collisions that occur at or after the 64 th byte (octet) in the frame. This may indicate 
that delays on your Ethernet are too long, and you have either exceeded the repeater count or cable length 
specified in the Ethernet standard. 

♦ MAC Received Error Counts data errors detectableas 10BASE-TX "symbol errors," bit patterns with illegal 
encodi ngs. This may i ndicate noi se on the I i ne. 

♦ Dropped Frames Thenumber offrames which aredropped bythis port sincethelast Switch reboot. 

♦ Undersize Frames The number of frames detected that are less than the minimum permitted frame size of 
64 bytes and have a good CRC. Undersize frames usually indicate collision fragments, a normal network 
occurrence 

♦ Total Errors The sum of the CRC Error, Oversize Frames, FragmentsJ abber, LateCdlision, MAC Received 
E rror, Dropped F rames, and U ndersize F rames counters. 

♦ Collisions The best estimateofthetotal numberof collisions on this Ethernet segment. 
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Figure 7-33. Port Packet Analysis window 
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The i nformation is descri bed as fol lows: 

♦ Update Interval Choose the desired setting: 2 seconds, 5 seconds, 15 seconds, 30 seconds, 60 seconds or 
Suspend. 

♦ 64 The total number of packets (including bad packets) received that were 64 octets in length (exduding framing 
bits but including FCS octets). 
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♦ 65-127 The total number of packets (including bad packets) received that were between 65 and 127 octets in 
length indusive(exduding framing bits but including FCS octets). 

♦ 128-255 Thetotal number of packets (induding bad packets) received that were between 128 and 255 octets in 
length inclusive (excluding framing bits but induding FCS octets). 

♦ 256-511 Thetotal number of packets (including bad packets) received that were between 256 and 511 octets in 
length inclusive(excluding framing bits but induding FCS octets). 

♦ 512-1023 Thetotal number of packets (including bad packets) received that were between 512 and 1023 octets 
in length inclusive (excluding framing bits but including FCS octets). 

♦ 1024-1518 The total number of packets (including bad packets) received that were between 1024 and 1518 
octetsin length inclusive (exduding framing bits but including FCS octets). 

♦ Rx (good) Thenumberof goodframes received. Thisalsoindudes local anddropped packets. 

♦ Tx (good) The number of good frames sent from the respective port. 

♦ Total Rx The number of frames received, good and bad. 

♦ Tx Bytes The number of good bytes sent from the respective port. 

♦ Rx Bytes Thenumberof good bytes received. Thisalsoindudes local anddropped packets. 

♦ Total Rx The number of bytes received, good and bad. 

♦ Unicast Rx/Tx Thetotal number of good packets that were received by and directed to a unicast address. Note 
that this does not include dropped unicast packets 

♦ Multicast Rx/Tx Thetotal number of good packets that were received by and directed to a multicast address. 
Note that this number does not indude packets directed to the broadcast address 

♦ Broadcast Rx/Tx Thetotal number of good packets that were received by and directed to a broadcast address. 
Note that this does not i nclude multicast packets. 
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Figure 7-34. Port Utilization Graph window 

The i nformation is descri bed as fol lows: 

♦ Last Detected Source Address MAC address of the last devicethat sent packets over this port. 
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Figure 7-35. MAC Address Table window 
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The first selection on the Browse Address Table menu in the window on the left is None. This allows you todisplay a table 
containing MAC addresses, VLANs, ports, and respective learned statuses. Clicking the Next Page hyperlink at the 
bottom of the window will allow you to display the complete MAC Address Table. You mayalsoentera VLAN ID number 
and MAC address at the top of thetable and click Find to locate a specific MAC Address Table entry. 
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Figure 7-36. MAC Address Table - MAC address window 



The second selection on the Browse Address Table menu in the window on the left is MAC Address. This allows you to 
display a tablecontaining MAC addresses, VLANs, ports, and respective learned statuses. Clicking theNext Page 
hyperlink at the bottom of the window will allow you to display the complete MAC Address Table. You may also enter a 
MAC address at thetop of the tableand click Find to locate a specific MAC Address Table entry. 
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Figure 7-37. MAC Address Table - Port window 




Thethird selection on the Browse Address Table menu in the window on the left is Port. This allows you todisplay a table 
containing MAC addresses, VLANs, ports, and respective learned statuses. Clicking the Next Page hyperlink at the 
bottom of the window will allow you todisplay the complete MAC Address Table. You may also enter a port number at the 
topof thetableand dick Find to locatea spedficMAC Address Table entry. 
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Figure 7-38. MAC Address Table - VLAN window 




The fourth selection on the Browse Address Table menu in the window on the left is VLAN. This allows you todispl ay a 
tablecontaining MAC addresses, VLAN s, ports, and respective learned statuses. Clicking the Next Page hyperlink at 
the bottom of the window will allow you todisplay the complete MAC Address Table. You mayalsoenter a VLAN I D 
number at the top of the table and cl ick F i nd to locate a specific M AC Address Table entry. 
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Figure 7-39. Browse IGMP Status window 



This window allows you to display Multicast Group, MAC Address, Queries (TX), Queries (RX), Reports, and 

Ports for IGMP Snooping in atableformat. 
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Figure 7-40. GVRP Status window 

This window offers various pieces of information pertaining toGVRP status. 
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Figure 7-41. GMRP Status window 

This window offers various pieces of information pertaining toGMRP status. 
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Figure 7-42. Switch Trap Logs window 



The Switch can record event information in its own logs, to designated SNMP trap receiving stations, and to the PC 
connected to the console manager. Clicking the Next Page hyperlink at the bottom of the window will allow you to 
display all the Switch Trap Logs. 

The i nformation is descri bed as fol lows: 



♦ Sequence Order in which each log entry was received. 

♦ Time Thetimethe log entry was received. 

♦ Log Text Event information pertaining to each log entry. 



Reset and Update 

The fourth category indudes: Reboot Switch, Reset to Factory Default, Update Firmware, Change 
Configuration File, Save Settings to TFTP Server, and Upload Log File 
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Figure 7-43. Reboot the Switch window 

To perform a reboot of the Switch, which resets the system, click the Reboot Now button. 
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Figure 7-44. Reset to Factory Default window 



A remote reset returns the Switch to the initial parameters set at the factory. Click the Reset to Factory Default to 
reset the Switch. 
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Figure 7-45. Update Firmware window 

To update firmware, fill in the requested information aboveandthen dick the Apply button. 
The i nformation is descri bed as fd lows: 

♦ Software Update Mode is Settoeither Network aSLI P. Determines whether the new firmware code 
should be obtained through the Ethernet network or through theconsde port. 

♦ TFTP Server Address ThelP address dtheTFTP server wherethenewfirmwarecodeis. 

♦ Firmware Update Determines whether or not the Switch should replace its switching softwarethe next time 
it is rebooted. 



♦ File Name The path and the namedthefile which hddsthenewfirmwarecodeon theTFTP server. 



144 



Web-Based Network Management 



24-port NWay Ethernet Switch User's Guide 



Change Configuration File 



|S Netscape 






1 


File Edit View Go 


Communicator Help 






I * 


m & -i * ft 


m 




;; Back 


Reload Home Search Netscape Print Security Shop 


Stop 




Bookmarks 


J' Location: | http: /Al 0.24. 37. 2/html/H main, html 




ypl' What's Related 


Instant Message 


g WebMail g Contact g People g Yellow Pages g Download 


[{§] Find Sites Qj Channels 







Configure 1 Configur 



Switch 



Management 



Monitor 



Reset and I 
Update 



Save 
Changes ) 



Help 



Change Configuration File 



Reboot Switch 

Re:et to Factory 
Default 

Update Firmware 

Change 
Configuration File 

Save Settings to 
TFTP Server 
Upload Log File 



Software Update Mode is 


| Network J^J 


TFTP Server Address is 




|l0. 17. 18. 120 







File Download 


Disabled j^J 


File Name 




|d: \ download\ des3 2 2 5g\ 3225g. cf g 







Document: Done 




Figure 7-46. Change Configuration File window 

Tochangea configuration file, fill the fields in aboveand then dick Apply. 
The i nformation is descri bed as fol lows: 

♦ Software Update Mode is Settoeither Network or SLI P. Determines whether the configuration fileshould 
be obtai ned through the Ethernet network a through the console port. 

♦ TFTP Server Address is The IP address of theTFTP server where the configuration file is. 

♦ File Download Determines whether or not the Switch should download itsconfigurationfilethenexttimeit 
is booted. 



♦ File Name The path and configuration name on theTFTP server. 
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Figure 7-47. Save Settings to TFTP Server window 

To save settings to a file on your TFTP server, fill the fields in aboveandthen click Upload now. 
The i nformation is descri bed as fol lows: 

♦ TFTP Server Address is ThelP address of theTFTP server where the setting file will besaved. 

♦ File Name Thepath andfilenameforthesettingsfileon theTFTP server. 

♦ Last Upload Status Read-only field displays the most recent upload activity. 
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Figure 7-48. Upload Log File window 

Tosavea log fileto your TFTP server, fill the fields in aboveandthen click Upload now. 
The i information is descri bed as fol lows: 

♦ TFTP Server Address is ThelP address of theTFTP server wherethelogfilewill besaved. 

♦ File Name Thepath and file nameforthefileto besaved on theTFTP server. 

♦ Last Upload Status Read-only field displays the most recent upload activity. 
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Figure 7-49. Save Changes window 

Tosaveall thechanges made in the current session tothe Switch's flash memory, click the Save Changes Now 
button. 



Help 

Click this button to access the online help files for the Switch. 
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A 



Technical Specifications 





Standards: 


IEEE 802.3 10BASE-T Ethernet 

IEEE 802. 3u 100BASE-TX Fast Ethernet 

IEEE 802.3Z 1000BASE-SX/LX Gigabit Ethernet 

IEEE 802.3ab 1000BASE-T Gigabit Ethernet 

ANSI/IEEEStd802.3N Way A uto-N egoti ati on 

IEEE 802.1QVLAN Tagging 

IEEE 802. lp Priority Queue, GARP, GM RP 




IEEE 802.3xFul 


-duplex Flow Control 


Protocols: 


CSMA/CD 


Data Transfer 
Rates: 


Half duplex 


Full duplex 


Ethernet 


10 M bps 


20Mbps 


Fast Ethernet 


100Mbps 


200Mbps 


Gigabit Ethernet 


*N/A 2000Mbps 

* 1000BASE-T can be negotiated to lOOOM/Half 


Topology: 


Star 



Technical Specifications 
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Network Cables: 




10BASE-T: 


2-pair UTP Cat. 3, 4, 5 (100m max.) 
EIA/TIA- 568 100-ohm STP (100 m max.) 


100BASE-TX: 


2-pair UTP Cat. 5 (100m max.) 
EIA/TIA-568 100-ohm STP (100m max.) 


100BASE-FX: 


62.5/125-micron multi mode fiber (2 km max.) 


1000BASE-SX: 


62.5/125-micron multi mode fiber (275m max.) 
50/125-micron multi mode fiber (550m max.) 


lOOOBASE-LX: 


62.5/125-micron multi mode fiber (550m max.) 
50/125-micron multi mode fiber (550m max.) 
9-micron single-mode fiber (5 km max.) 


lOOOBASE-T: 


UTP Cat. 5 or 5e (100m max.) 
EIA/TIA-568B 100-ohm STP (100m max.) 


Number of Ports: 


24 x 10/100 M bps N Way ports 
1 Gigabit Ethernet (optional) 






AC inputs: 


100 - 240 VAC, 50/60 Hz (internal universal 
power supply) 


Power 

Consumptio 

n: 


100 watts maxi mum 


DC fans: 


2 built-in 40 x 40 x 10 mm fans 


Operating 

Temperatur 

e: 


Oto 50 degrees Celsius 


Storage 

Temperatur 

e: 


-25 to 55 degrees Celsius 


Humidity: 


Operati ng: 5% to 95% RH non-condensi ng; 
Storage: 0%to95%RH non-condensing 


Dimensions: 


441 mm x 367 mm x 44 mm, (17.36 x 14.45 x 1.75 
inches), 19-inch standard rack-mount width (1 U) 


Weight: 


5 kg (11 lb.) 
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EMI: 


FCC Class A, CE Class A, VCCI Class A, BSMI 
Class A, C-Tick Class A 


Safety: 


UL,CSA,TUV/GS 



Performance 


Transmission Method: 


Store-and-forward 


RAM Buffer: 


12 MB per device 


F i 1 teri ng Address Tabl e: 


12K MAC address per device 


Packet Filtering/ 
Forwarding Rate: 


Full -wire speed for all connections. 
148,800 pps per port (for 100M bps) 


MAC Address Learning: 


Automatic update. 


F orwardi ng Table Age 
Time: 


M ax age: 10- 1000000 seconds. j 
Default =300. 



Technical Specifications 
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RJ-45 Pin Specification 



When connecting the DES-3225G Series Switch to another switch, bridge, or hub, a modified crossover cable is necessary. 
Please review these products for matching cable pin assignment. 

The following diagram and table show the standard RJ -45 receptade/connecta and their pin assignments for the switch- 
to-network adapter card connection, and the straight/crossover cablefor the Switch-to-switch/hub/bridge connection. 




Figure B-1. The standard RJ-45 receptacle/connector 
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RJ-45 Connector pin assignment 


Contact 


Media Direct Interface 




Signal 


1 


Tx + (transmit) 


2 


Tx - (transmit) 


3 


Rx + (receive) 


4 


Not used 


5 


Not used 


6 


Rx - (receive) 


7 


Not used 


8 


Not used 



Table B-1. The standard Category 3 cable, RJ-45 pin assignment 

The foil owing shows straight cable and crossover cable connection: 



<t 



■ 1 Tx+ 

■ 2 Tx- 



■ 3 Rx+ 

■ 6 Rx- 



Tx+ 1 — 




TX- 2 — 




Rx+ 3 — 




Rx- 6 









Figure B-2. Straight cable for Switch (uplink MDI-II port) to switch/Hub or other devices connection 





, 1 Tx+ 

1 2 TX- 

' 3 RX+ 






* — e rx 




Figure B-3. Crossover cable for Switch (MDI-X port) to switch/hub or other network devices (MDI-X port) 

connection 
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Sample Configuration File 



This Appendix providesa sample configuration filethat can be used with the Update Firmware and Configuration 
Files screen in the console program. 

The configuration file is a simple text filethat you create. It has two functions: to point to the location of a fileon aTFTP 
server, and to set the IP address, subnet mask, and default gateway for the switch. The file being uploaded can be either 
new runtime switching software or a switch settings file which was previously saved on theTFTP server using the Save 
Settings to TFTP Server option intheSystem Utilities menu.ThelP address settings defined in theconfiguration 
file will override all other IP settings, even those defined in the settings file being uploaded. This enables the settings from 
one switch to be uploaded to another switch without their IP settings being the same (and thus coming into conflict). 

Commands: 

♦ Code_type - This command tells the Switch the type of fi le you wish to upload to the Switch. Possi ble Code_types 
arePROM, runtime, or CONFIG. This should always bethe first setting. 

• PROM - PROM updatefile. 

• RUNTIME - Switchingsoftwareupdatefile. 

• CONFIG- Imagefilecfswitchsettingscreatedbythesettingsbackupprocedure 

♦ lmage_f±le - This command tells the Switch the complete path and filename for the file to be loaded into the 
Switch. For example, "e; \3225\3225prom. tfp". Make sure double-quotes are used as in the example file 
below. 

♦ lp_addr- This is the IP address that will be assigned to the switch. This command is included for downloading a 
configuration settings file to another switch. The I P address defined in this file will override the I P address in the 
configuration settings file thus the switch you are downloading to can havea different IP address than the one that 
created theconfiguration settings file. An example IP address is 10. 12 . 19. 102. 

♦ Subnet_mask - This is the subnet mask that will be assigned to the switch. An example subnet mask is 
255.128.0.0. 

♦ Default_gateway - This is the default gateway I P that will be assigned to the switch. An example default 
Gateway I P is 1 0 . 254 . 254 . 253. 

♦ #- Remark. When placed as the first character on a line, the entire line will be ignored by the switch. This allcws 
items to be labeled, or unused commands to remain in the file so that the syntax will not be forgotten. 

Notes about the Configuration File: 

This configuration file can only contain 4 settings: Code_type, lp_addr, Subnet_mask and 
Default_gate way. 

Each command can only appear once in theconfiguration file 
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If both the Firmware Update and UseConfig File options are enabled on the Update Firmware and Configuration 

Files screen, the Firmware Update command will take precedence and only the firmware file will be uploaded to the 
Switch. 

The Config image file, which contains all configuration settings and was created by the Switch, is prefixed with the version 
number of the runti me software to hel p with fi le management. 

# Sample Config File 
Code_ type=PROM 

Image_file= "e : \ 3225 \ 3225prom .tfp" 

# specify IP address 
Ip_addr = 10 .12.19.102 

# specify subnet mask 
Subnet_mask = 255 . 128 .0.0 

# specify default gateway 
Default_gateway = 10 . 254 . 254 . 253 



Sample Configuration File 
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Runtime Switch Software Default 

Settings 



Load Mode 


Ethernet 


Configuration update 


Disable 


Firmware update 


Disable 


Out-of-band baud rate 


9600 


RS232 mode 


Console 


IP address 


0.0.0.0 


Subnet mask 


0.0.0.0 


Default router 


0.0.0.0 


BootP service 


Enable 


TFTP server IP address 


0.0.0.0 


IGMP time out 


300 sees 


IGMP capture state 


Disable 


Partition mode 


Enable 


Address table lock 


Disable 


Device HOL 


Enable 


Port HOL 


Enable 


Console time out 


15 min 


User name 


Blank 


Password 


Blank 


Device STP 


Disable 


Port STP 


Enable 


Port enable 


Enable 


Bridge max age 


20 sees 


Bridge hello time 


2 sec 


Bridge forward delay 


15 sec 


Bridge priority 


32768 


Port STP cost 


19 (Gigabit=4) 


Port STP priority 


128 


Forwarding table aging time 


300 sees 


Address lookup mode 


Level 1 


NWay 


Enable' 


Flow control 


Enable 


Backpressure 


Disable 


Port lock 


Disable 


Port priority 


Default 


Broadcast storm rising action 


Do nothing 


Broadcast storm falling action 


Do nothing 


Broadcast storm rising threshold 


500pkts/sec 


Broadcast storm falling threshold 


250pkts/sec 


Community string 


"public", "private" 


VLAN mode 


Basic 


SNMP VLAN(802.1Q) 


1 


Default port VID 


1 


Ingress rule checking 


Disable 


Mirror src port <->target port 


Mr2 


Mirror 


Disable 
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Runtime Switch Software Default Settings 
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Print, type or use block letters 

Your name: Mr./Ms 

Organization: 

Your title at organization: 

Telephone: 

Organization's full address: 



Country: 

Date of purchase (Month/Day/Year): 



Product Model 


Product Serial 
No. 


* Product installed in type of 
computer (e.g., Compaq 486) 


* Product installed in 
computer serial No. 











































(* Applies to adapters only) 

Product was purchased from: 



Reseller's name: 

Telephone: Fax: 

Reseller's full address: 



Dept. 

Fax: 



Answers to the following questions help us to support your product: 

1. Where and how will the product primarily be used? 

□Home DOffice DTravel DCompany Business □ Home Business DPersonal Use 

2. How many employees work at installation site? 

□ 1 employee D2-9 D10-49 D50-99 D100-499 D500-999 D1000 or more 

3. What network protocol(s) does your organization use ? 

□XNS/IPX DTCP/IP DDECnet DOthers 

4. What network operating system(s) does your organization use ? 

□D-Link LANsmart DNovell NetWare □NetWare Lite DSCO Unix/Xenix DPC NFS n3Com 3+Open 
□Banyan Vines DDECnet Pathwork DWindows NT DWindows NTAS DWindows '95 
□Others 

5. What network management program does your organization use ? 

□D-View nHPOpenView/Windows nHPOpenView/Unix DSunNet Manager DNovell NMS 
□NetView 6000 DOthers 

6. What network medium/media does your organization use ? 

□Fiber-optics DThick coax Ethernet DThin coax Ethernet Q1 OBASE-T UTP/STP 

□ 100BASE-TX D100BASE-T4 niOOVGAnyLAN DOthers 

7. What applications are used on your network? 

□Desktop publishing ^Spreadsheet DWord processing DCAD/CAM 
□Database management DAccounting DOthers 

8. What category best describes your company? 

□Aerospace ^Engineering ^Education QFinance DHospital DLegal D Insurance/Real Estate DManufacturing 

□ Retail/ChainstoreA/Vholesale □Government □Transportation/Utilities/Communication DVAR 
□System house/company DOther 

9. Would you recommend your D-Link product to a friend? 

□Yes DNo DDonl know yet 

10. Your comments on this product? 
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